type=CRED_DISP msg=audit(1771838205.341:56191): pid=449019 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838205.345:56192): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838205.345:56193): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838205.368:56194): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838205.369:56195): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838205.370:56196): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=449024 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838205.421:56197): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838205.421:56198): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838205.435:56199): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838205.435:56200): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838205.437:56201): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=449037 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838205.464:56202): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838205.464:56203): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838205.482:56204): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838205.483:56205): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838205.484:56206): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=449051 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1771838205.544:56207): pid=449067 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1771838205.544:56208): pid=449067 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6278746C75656C6C727077686C796763747566656A686E6B656571767A677876203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313737313833383230342E383539303131322D313137382D3230353334313633343539333434372F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1771838205.545:56209): pid=449067 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1771838205.548:56210): pid=449067 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838205.799:56211): pid=449067 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1771838205.800:56212): pid=449067 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838205.803:56213): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838205.803:56214): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838205.824:56215): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838205.824:56216): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838205.826:56217): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=449070 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838205.857:56218): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838205.857:56219): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838205.946:56220): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838205.946:56221): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838205.947:56222): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=449084 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838205.983:56223): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838205.983:56224): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838205.999:56225): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838205.999:56226): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838206.000:56227): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=449097 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838206.030:56228): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838206.030:56229): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838206.063:56230): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838206.063:56231): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838206.064:56232): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=449116 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838206.145:56233): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838206.145:56234): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838206.169:56235): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838206.169:56236): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838206.170:56237): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=449129 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838206.207:56238): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838206.207:56239): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838206.232:56240): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838206.232:56241): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838206.234:56242): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=449143 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1771838206.303:56243): pid=449159 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1771838206.303:56244): pid=449159 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F72726364686C626F6A677A746975776E797366616A6677646666666163646D203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313737313833383230352E393835373732382D313231352D3135363930393137353335383238352F416E736962616C6C5A5F73797374656D642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1771838206.304:56245): pid=449159 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1771838206.307:56246): pid=449159 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=SERVICE_START msg=audit(1771838206.775:56247): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1771838207.070:56248): prog-id=2219 op=LOAD
type=BPF msg=audit(1771838207.070:56249): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771838207.074:56250): prog-id=2220 op=LOAD
type=BPF msg=audit(1771838207.074:56251): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771838207.075:56252): prog-id=2221 op=LOAD
type=BPF msg=audit(1771838207.075:56253): prog-id=2222 op=LOAD
type=BPF msg=audit(1771838207.075:56254): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771838207.075:56255): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771838207.078:56256): prog-id=2223 op=LOAD
type=BPF msg=audit(1771838207.078:56257): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771838207.078:56258): prog-id=2224 op=LOAD
type=BPF msg=audit(1771838207.078:56259): prog-id=2225 op=LOAD
type=BPF msg=audit(1771838207.078:56260): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771838207.078:56261): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771838207.086:56262): prog-id=2226 op=LOAD
type=BPF msg=audit(1771838207.086:56263): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771838207.088:56264): prog-id=2227 op=LOAD
type=BPF msg=audit(1771838207.088:56265): prog-id=2228 op=LOAD
type=BPF msg=audit(1771838207.088:56266): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771838207.088:56267): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1771838207.095:56268): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1771838207.154:56269): pid=449159 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1771838207.154:56270): pid=449159 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838207.158:56271): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838207.158:56272): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838207.261:56273): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838207.261:56274): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838207.262:56275): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=449231 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838207.296:56276): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838207.296:56277): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838207.374:56278): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838207.374:56279): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838207.426:56280): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=449245 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838207.450:56281): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838207.450:56282): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838207.465:56283): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838207.465:56284): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838207.466:56285): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=449258 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838207.499:56286): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838207.499:56287): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838207.532:56288): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838207.532:56289): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838207.533:56290): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=449277 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838207.579:56291): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838207.579:56292): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838207.591:56293): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838207.591:56294): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838207.592:56295): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=449290 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838207.626:56296): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838207.626:56297): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838207.639:56298): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838207.639:56299): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838207.641:56300): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=449304 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1771838207.715:56301): pid=449329 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1771838207.715:56302): pid=449329 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D726C6971746172617465756C6B68626E73757A64657A66797764707071686674203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313737313833383230372E343533353131322D313233392D3236303336353131383932303537342F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1771838207.716:56303): pid=449329 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1771838207.721:56304): pid=449329 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=AVC msg=audit(1771838207.885:56305): avc:  denied  { read } for  pid=449395 comm="chown" name="redis" dev="tmpfs" ino=2798 scontext=system_u:system_r:container_t:s0:c346,c351 tcontext=system_u:object_r:redis_var_run_t:s0 tclass=dir permissive=0
type=SYSCALL msg=audit(1771838207.885:56305): arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=560b0362a770 a2=b0900 a3=0 items=0 ppid=449348 pid=449395 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="chown" exe="/usr/bin/coreutils" subj=system_u:system_r:container_t:s0:c346,c351 key=(null)ARCH=x86_64 SYSCALL=openat AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1771838207.885:56305): proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D63686F776E002F7573722F62696E2F63686F776E002D52007265646973002F7661722F72756E2F7265646973
type=AVC msg=audit(1771838207.941:56306): avc:  denied  { write } for  pid=449413 comm="redis-cli" name="redis.sock" dev="tmpfs" ino=6103 scontext=system_u:system_r:container_t:s0:c346,c351 tcontext=system_u:object_r:redis_var_run_t:s0 tclass=sock_file permissive=0
type=SYSCALL msg=audit(1771838207.941:56306): arch=c000003e syscall=42 success=no exit=-13 a0=3 a1=55ae867e8800 a2=6e a3=2c items=0 ppid=449412 pid=449413 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="redis-cli" exe="/usr/bin/redis-cli" subj=system_u:system_r:container_t:s0:c346,c351 key=(null)ARCH=x86_64 SYSCALL=connect AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1771838207.941:56306): proctitle=2F7573722F62696E2F72656469732D636C69002D73002F7661722F72756E2F72656469732F72656469732E736F636B00696E666F
type=USER_END msg=audit(1771838207.946:56307): pid=449329 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1771838207.946:56308): pid=449329 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838207.951:56309): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838207.951:56310): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838208.227:56311): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838208.227:56312): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838208.228:56313): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=449416 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838208.279:56314): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838208.280:56315): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838208.294:56316): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838208.294:56317): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838208.296:56318): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=449429 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838208.329:56319): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838208.329:56320): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838208.342:56321): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838208.342:56322): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838208.343:56323): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=449443 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1771838208.409:56324): pid=449459 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1771838208.409:56325): pid=449459 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D706F6172657A6E796C7176617A6E6E7174756A7965736C706D7371686D7A6F7A203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313737313833383230372E343533353131322D313233392D3236303336353131383932303537342F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1771838208.410:56326): pid=449459 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1771838208.412:56327): pid=449459 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838208.621:56328): pid=449459 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1771838208.622:56329): pid=449459 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838208.626:56330): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838208.626:56331): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838208.640:56332): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838208.640:56333): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838208.642:56334): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=449462 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838208.672:56335): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838208.672:56336): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838208.742:56337): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838208.742:56338): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838208.744:56339): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=449476 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838208.776:56340): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838208.776:56341): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838208.794:56342): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838208.794:56343): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838208.795:56344): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=449489 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838208.832:56345): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838208.832:56346): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838208.861:56347): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838208.861:56348): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838208.862:56349): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=449508 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838208.910:56350): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838208.911:56351): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838208.926:56352): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838208.926:56353): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838208.927:56354): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=449521 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838208.957:56355): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838208.957:56356): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838208.973:56357): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838208.973:56358): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838208.975:56359): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=449536 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1771838209.043:56360): pid=449552 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1771838209.044:56361): pid=449552 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7469736574706B7661746B696B6D716370707774676F6C6E6C7477796F70746F203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313737313833383230382E373738363630332D313237342D3233353838383535313637363131322F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1771838209.045:56362): pid=449552 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1771838209.049:56363): pid=449552 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838209.301:56364): pid=449552 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1771838209.301:56365): pid=449552 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838209.306:56366): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838209.306:56367): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838209.331:56368): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838209.331:56369): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838209.332:56370): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=449558 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838209.388:56371): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838209.388:56372): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=SERVICE_START msg=audit(1771838209.396:56373): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=setroubleshootd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1771838209.401:56374): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838209.401:56375): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838209.403:56376): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=449571 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838209.436:56377): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838209.437:56378): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838209.450:56379): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838209.450:56380): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838209.452:56381): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=449585 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1771838209.532:56382): pid=449602 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1771838209.533:56383): pid=449602 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D78716464666F75627A6A6163627862666D67786C736C746A756C70697870676A203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313737313833383230382E373738363630332D313237342D3233353838383535313637363131322F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1771838209.535:56384): pid=449602 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1771838209.552:56385): pid=449602 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=SERVICE_START msg=audit(1771838209.554:56386): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbus-:1.1-org.fedoraproject.SetroubleshootPrivileged@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1771838209.791:56387): pid=449602 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1771838209.792:56388): pid=449602 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838209.796:56389): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838209.796:56390): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838209.808:56391): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838209.808:56392): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838209.809:56393): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=449612 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838209.833:56394): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838209.833:56395): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838209.915:56396): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838209.915:56397): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838209.917:56398): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=449628 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838209.946:56399): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838209.946:56400): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838209.957:56401): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838209.957:56402): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838209.958:56403): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=449642 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838209.994:56404): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838209.995:56405): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838210.020:56406): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838210.020:56407): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838210.021:56408): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=449661 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838210.070:56409): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838210.071:56410): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838210.084:56411): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838210.084:56412): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838210.085:56413): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=449674 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838210.117:56414): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838210.117:56415): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838210.128:56416): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838210.128:56417): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838210.130:56418): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=449688 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1771838210.198:56419): pid=449704 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1771838210.198:56420): pid=449704 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D696671726A7869776A68766C6166706B626873756B7169646E63626774727377203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313737313833383230392E393437393931342D313331312D3133353839353838313332353632352F416E736962616C6C5A5F73797374656D642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1771838210.199:56421): pid=449704 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1771838210.202:56422): pid=449704 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=BPF msg=audit(1771838210.827:56423): prog-id=2229 op=LOAD
type=BPF msg=audit(1771838210.827:56424): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771838210.831:56425): prog-id=2230 op=LOAD
type=BPF msg=audit(1771838210.831:56426): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771838210.831:56427): prog-id=2231 op=LOAD
type=BPF msg=audit(1771838210.831:56428): prog-id=2232 op=LOAD
type=BPF msg=audit(1771838210.831:56429): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771838210.831:56430): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771838210.835:56431): prog-id=2233 op=LOAD
type=BPF msg=audit(1771838210.835:56432): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771838210.835:56433): prog-id=2234 op=LOAD
type=BPF msg=audit(1771838210.835:56434): prog-id=2235 op=LOAD
type=BPF msg=audit(1771838210.835:56435): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771838210.835:56436): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771838210.842:56437): prog-id=2236 op=LOAD
type=BPF msg=audit(1771838210.842:56438): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771838210.844:56439): prog-id=2237 op=LOAD
type=BPF msg=audit(1771838210.844:56440): prog-id=2238 op=LOAD
type=BPF msg=audit(1771838210.844:56441): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771838210.844:56442): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1771838210.926:56443): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=netns-placeholder comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838210.926:56444): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=netns-placeholder comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1771838210.975:56445): pid=449704 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1771838210.976:56446): pid=449704 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838210.981:56447): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838210.981:56448): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838210.999:56449): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838211.000:56450): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838211.001:56451): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=449751 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838211.033:56452): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838211.033:56453): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838211.631:56454): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838211.631:56455): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838211.633:56456): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=449765 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838211.663:56457): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838211.663:56458): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838211.680:56459): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838211.680:56460): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838211.681:56461): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=449778 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838211.717:56462): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838211.718:56463): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838211.751:56464): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838211.751:56465): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838211.753:56466): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=449797 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=SERVICE_START msg=audit(1771838212.029:56467): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838212.032:56468): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838212.036:56469): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838212.039:56470): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838212.043:56471): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1771838212.168:56472): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838212.168:56473): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838212.186:56474): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838212.187:56475): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838212.188:56476): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=449872 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838212.230:56477): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838212.230:56478): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838212.245:56479): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838212.245:56480): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838212.247:56481): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=449903 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1771838212.323:56482): pid=449930 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1771838212.324:56483): pid=449930 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D686F756869767963676F716F646167766B65796B6A71656D6B636B736E656364203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313737313833383231312E363635393236372D313334312D34303338313330393239343935322F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1771838212.325:56484): pid=449930 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1771838212.331:56485): pid=449930 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=SERVICE_STOP msg=audit(1771838212.338:56486): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838212.428:56487): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838212.496:56488): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838212.536:56489): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1771838212.549:56490): pid=449930 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1771838212.549:56491): pid=449930 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838212.552:56492): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838212.552:56493): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838212.565:56494): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838212.565:56495): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838212.566:56496): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=449989 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838212.587:56497): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838212.587:56498): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=SERVICE_STOP msg=audit(1771838212.647:56499): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1771838212.658:56500): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838212.658:56501): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838212.659:56502): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=450004 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838212.685:56503): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838212.685:56504): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838212.699:56505): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838212.699:56506): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838212.700:56507): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=450017 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838212.732:56508): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838212.732:56509): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838212.771:56510): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838212.771:56511): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838212.773:56512): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=450036 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838212.823:56513): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838212.823:56514): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838212.839:56515): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838212.839:56516): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838212.840:56517): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=450049 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838212.872:56518): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838212.872:56519): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838212.887:56520): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838212.887:56521): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838212.889:56522): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=450063 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1771838212.960:56523): pid=450079 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1771838212.960:56524): pid=450079 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D636664616670637A7A7A757A656D796C797A666B6F79727A65736F7763726B6B203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313737313833383231322E363837363038352D313336342D3233363336323939393436323931312F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1771838212.961:56525): pid=450079 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1771838212.964:56526): pid=450079 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838213.177:56527): pid=450079 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1771838213.178:56528): pid=450079 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838213.182:56529): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838213.182:56530): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838213.208:56531): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838213.209:56532): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838213.210:56533): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=450083 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838213.246:56534): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838213.246:56535): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838213.270:56536): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838213.270:56537): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838213.271:56538): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=450096 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838213.295:56539): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838213.295:56540): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838213.334:56541): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838213.334:56542): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838213.336:56543): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=450110 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838213.363:56544): pid=450124 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=450124 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_END msg=audit(1771838213.407:56545): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838213.407:56546): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838213.424:56547): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838213.424:56548): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838213.426:56549): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=450125 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=CRYPTO_SESSION msg=audit(1771838213.449:56550): pid=450114 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=450124 suid=74 rport=57244 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771838213.449:56551): pid=450114 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=450124 suid=74 rport=57244 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_END msg=audit(1771838213.457:56552): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838213.457:56553): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838213.471:56554): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838213.472:56555): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838213.473:56556): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=450139 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1771838213.542:56557): pid=450155 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1771838213.543:56558): pid=450155 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D77736D6972656B696A657071716C78716E7A7666636F6D66656A62616E637868203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313737313833383231322E363837363038352D313336342D3233363336323939393436323931312F416E736962616C6C5A5F636F70792E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1771838213.543:56559): pid=450155 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1771838213.547:56560): pid=450155 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838213.560:56561): pid=450114 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=450114 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771838213.560:56562): pid=450114 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_END msg=audit(1771838213.738:56563): pid=450155 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1771838213.739:56564): pid=450155 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838213.743:56565): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838213.743:56566): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838213.756:56567): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838213.756:56568): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838213.758:56569): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=450158 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838213.784:56570): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838213.784:56571): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838214.192:56572): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838214.192:56573): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838214.193:56574): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=450173 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838214.225:56575): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838214.225:56576): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838214.238:56577): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838214.238:56578): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838214.239:56579): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=450186 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838214.275:56580): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838214.276:56581): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838214.307:56582): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838214.307:56583): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838214.308:56584): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=450205 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838214.358:56585): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838214.359:56586): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838214.370:56587): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838214.370:56588): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838214.371:56589): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=450218 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838214.398:56590): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838214.398:56591): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838214.429:56592): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838214.430:56593): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838214.431:56594): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=450232 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1771838214.490:56595): pid=450248 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1771838214.490:56596): pid=450248 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D75676E6C757564736D6F676D69647068767378696E7263786878716B7A6C70203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313737313833383231342E323238363234362D313431352D3237373733383830313036343739382F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1771838214.492:56597): pid=450248 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1771838214.495:56598): pid=450248 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838214.704:56599): pid=450248 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1771838214.704:56600): pid=450248 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838214.708:56601): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838214.708:56602): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838214.727:56603): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838214.727:56604): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838214.728:56605): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=450251 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838214.757:56606): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838214.757:56607): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838214.875:56608): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838214.875:56609): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838214.877:56610): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=450265 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838214.908:56611): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838214.908:56612): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838214.921:56613): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838214.921:56614): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838214.922:56615): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=450278 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838215.460:56616): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838215.460:56617): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838215.497:56618): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838215.497:56619): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838215.498:56620): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=450298 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838215.550:56621): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838215.550:56622): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838215.563:56623): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838215.563:56624): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838215.565:56625): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=450311 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838215.595:56626): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838215.595:56627): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838215.606:56628): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838215.606:56629): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838215.608:56630): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=450325 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1771838215.675:56631): pid=450341 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1771838215.675:56632): pid=450341 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D676A626A6B6A71726E7062646A6D74687863747263656F6D7072716B70627277203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313737313833383231342E393130353039382D313433392D3136333836333532383038303331322F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1771838215.676:56633): pid=450341 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1771838215.679:56634): pid=450341 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838215.986:56635): pid=450341 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1771838215.986:56636): pid=450341 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838215.989:56637): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838215.989:56638): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838216.010:56639): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838216.010:56640): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838216.011:56641): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=450345 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838216.040:56642): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838216.041:56643): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838216.138:56644): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838216.138:56645): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838216.140:56646): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=450359 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838216.169:56647): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838216.169:56648): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838216.187:56649): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838216.188:56650): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838216.189:56651): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=450372 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838216.228:56652): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838216.228:56653): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838216.258:56654): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838216.258:56655): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838216.260:56656): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=450391 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838216.305:56657): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838216.305:56658): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838216.323:56659): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838216.323:56660): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838216.324:56661): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=450404 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838216.353:56662): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838216.353:56663): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838216.368:56664): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838216.368:56665): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838216.369:56666): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=450418 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1771838216.432:56667): pid=450434 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1771838216.433:56668): pid=450434 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D737767617A7276617A6D6C746B79796872736E75706C6479727067696271686F203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313737313833383231362E313731383534352D313436332D3136313835323239353736343435372F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1771838216.433:56669): pid=450434 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1771838216.435:56670): pid=450434 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838216.657:56671): pid=450434 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1771838216.657:56672): pid=450434 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838216.660:56673): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838216.660:56674): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838216.684:56675): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838216.684:56676): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838216.686:56677): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=450439 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838216.715:56678): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838216.716:56679): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838216.730:56680): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838216.730:56681): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838216.731:56682): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=450452 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838216.764:56683): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838216.764:56684): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838216.783:56685): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838216.783:56686): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838216.784:56687): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=450466 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838216.828:56688): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838216.828:56689): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838216.854:56690): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838216.854:56691): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838216.855:56692): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=450479 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838216.879:56693): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838216.879:56694): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838216.892:56695): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838216.892:56696): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838216.896:56697): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=450493 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1771838216.944:56698): pid=450509 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1771838216.944:56699): pid=450509 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D62677A7A6E756775617061616B72747971786C656D6E68676675737865646977203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313737313833383231362E313731383534352D313436332D3136313835323239353736343435372F416E736962616C6C5A5F636F70792E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1771838216.945:56700): pid=450509 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1771838216.947:56701): pid=450509 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838217.138:56702): pid=450509 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1771838217.138:56703): pid=450509 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838217.142:56704): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838217.142:56705): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838217.155:56706): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838217.155:56707): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838217.156:56708): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=450513 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838217.185:56709): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838217.186:56710): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838217.364:56711): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838217.364:56712): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838217.366:56713): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=450527 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838217.395:56714): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838217.395:56715): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838217.413:56716): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838217.413:56717): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838217.414:56718): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=450540 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838217.449:56719): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838217.449:56720): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838217.472:56721): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838217.472:56722): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838217.473:56723): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=450559 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838217.527:56724): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838217.527:56725): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838217.544:56726): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838217.544:56727): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838217.545:56728): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=450572 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838217.575:56729): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838217.575:56730): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838217.586:56731): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838217.586:56732): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838217.588:56733): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=450586 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838217.837:56734): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838217.837:56735): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838217.865:56736): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838217.865:56737): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838217.866:56738): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=450603 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838217.893:56739): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838217.893:56740): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838218.047:56741): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838218.047:56742): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838218.048:56743): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=450618 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838218.073:56744): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838218.073:56745): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838218.085:56746): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838218.085:56747): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838218.087:56748): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=450631 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838218.120:56749): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838218.121:56750): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838218.154:56751): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838218.154:56752): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838218.155:56753): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=450650 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838218.200:56754): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838218.201:56755): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838218.216:56756): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838218.216:56757): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838218.217:56758): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=450663 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838218.246:56759): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838218.246:56760): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838218.263:56761): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838218.263:56762): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838218.265:56763): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=450677 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838218.500:56764): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838218.500:56765): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838218.526:56766): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838218.527:56767): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838218.528:56768): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=450694 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838218.564:56769): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838218.564:56770): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838218.576:56771): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838218.576:56772): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838218.577:56773): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=450707 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838218.604:56774): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838218.604:56775): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838218.622:56776): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838218.622:56777): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838218.623:56778): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=450721 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838218.673:56779): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838218.673:56780): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838218.706:56781): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838218.706:56782): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838218.708:56783): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=450734 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838218.737:56784): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838218.737:56785): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838218.754:56786): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838218.754:56787): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838218.755:56788): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=450748 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838219.050:56789): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838219.050:56790): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838219.064:56791): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838219.064:56792): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838219.065:56793): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=450766 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838219.095:56794): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838219.095:56795): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838219.416:56796): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838219.418:56797): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838219.419:56798): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=450780 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838219.449:56799): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838219.449:56800): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838219.462:56801): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838219.462:56802): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838219.462:56803): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=450793 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838219.497:56804): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838219.497:56805): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838219.691:56806): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838219.691:56807): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838219.693:56808): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=450812 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838219.741:56809): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838219.741:56810): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838219.758:56811): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838219.758:56812): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838219.759:56813): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=450825 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838219.789:56814): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838219.789:56815): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838219.802:56816): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838219.802:56817): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838219.803:56818): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=450839 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1771838219.867:56819): pid=450855 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1771838219.867:56820): pid=450855 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6571686E706D656471686974657077736B7776746E716C646461666B6C676374203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313737313833383231392E343531323538322D313538332D38363131393738363134323933312F416E736962616C6C5A5F636F6E7461696E65725F636F6E6669675F646174612E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1771838219.869:56821): pid=450855 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1771838219.871:56822): pid=450855 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838220.093:56823): pid=450855 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1771838220.093:56824): pid=450855 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838220.096:56825): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838220.096:56826): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838220.110:56827): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838220.110:56828): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838220.111:56829): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=450859 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838220.139:56830): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838220.139:56831): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838220.463:56832): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838220.463:56833): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838220.464:56834): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=450873 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838220.491:56835): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838220.492:56836): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838220.509:56837): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838220.510:56838): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838220.511:56839): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=450886 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838220.545:56840): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838220.545:56841): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=SERVICE_STOP msg=audit(1771838220.553:56842): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbus-:1.1-org.fedoraproject.SetroubleshootPrivileged@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838220.582:56843): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=setroubleshootd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1771838220.785:56844): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838220.785:56845): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838220.787:56846): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=450905 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838220.836:56847): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838220.837:56848): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838220.849:56849): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838220.849:56850): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838220.850:56851): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=450918 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838220.881:56852): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838220.881:56853): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838220.898:56854): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838220.898:56855): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838220.899:56856): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=450932 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1771838220.953:56857): pid=450948 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1771838220.954:56858): pid=450948 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7871666A78696A62706A6C7A6F736D727A6269786567776A69796D7773677262203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313737313833383232302E343933383839362D313631362D37383135353231373532313632322F416E736962616C6C5A5F636F6E7461696E65725F636F6E6669675F686173682E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1771838220.954:56859): pid=450948 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1771838220.957:56860): pid=450948 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838221.190:56861): pid=450948 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1771838221.191:56862): pid=450948 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838221.195:56863): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838221.195:56864): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838221.209:56865): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838221.209:56866): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838221.210:56867): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=450952 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838221.238:56868): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838221.238:56869): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838221.459:56870): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838221.459:56871): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838221.460:56872): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=450966 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838221.489:56873): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838221.489:56874): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838221.500:56875): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838221.500:56876): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838221.501:56877): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=450979 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838221.534:56878): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838221.535:56879): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838221.798:56880): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838221.798:56881): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838221.799:56882): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=450998 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838221.849:56883): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838221.849:56884): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838221.861:56885): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838221.861:56886): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838221.863:56887): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=451011 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838221.893:56888): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838221.894:56889): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838221.905:56890): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838221.905:56891): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838221.906:56892): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=451025 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1771838221.970:56893): pid=451041 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1771838221.970:56894): pid=451041 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7479797877727772726F79666478656F6F6D796366626E6D6E746B6A6A77746D203B202F7573722F62696E2F707974686F6E33202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313737313833383232312E343931313737332D313634362D3231303430303731353931323435362F416E736962616C6C5A5F6564706D5F636F6E7461696E65725F6D616E6167652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1771838221.971:56895): pid=451041 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1771838221.974:56896): pid=451041 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838223.037:56897): pid=451041 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1771838223.037:56898): pid=451041 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838223.042:56899): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838223.042:56900): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838223.055:56901): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838223.055:56902): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838223.057:56903): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=451151 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838223.091:56904): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838223.091:56905): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838223.187:56906): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838223.187:56907): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838223.189:56908): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=451165 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838223.223:56909): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838223.223:56910): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838223.236:56911): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838223.236:56912): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838223.237:56913): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=451178 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838223.276:56914): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838223.276:56915): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838223.298:56916): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838223.299:56917): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838223.300:56918): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=451197 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838223.350:56919): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838223.350:56920): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838223.362:56921): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838223.362:56922): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838223.364:56923): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=451210 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838223.395:56924): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838223.395:56925): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838223.406:56926): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838223.406:56927): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838223.408:56928): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=451224 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1771838223.476:56929): pid=451240 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1771838223.476:56930): pid=451240 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A76716876687173797564736B6F787375697A6C6B64646363756F6565666175203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313737313833383232332E323235353235392D313637312D3135383639343139343934313336372F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1771838223.480:56931): pid=451240 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1771838223.484:56932): pid=451240 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838223.724:56933): pid=451240 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1771838223.724:56934): pid=451240 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838223.728:56935): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838223.728:56936): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838223.747:56937): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838223.747:56938): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838223.748:56939): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=451245 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838223.777:56940): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838223.777:56941): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838224.938:56942): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838224.938:56943): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838224.940:56944): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=451260 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838224.972:56945): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838224.972:56946): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838224.984:56947): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838224.984:56948): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838224.985:56949): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=451273 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838225.022:56950): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838225.022:56951): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838225.055:56952): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838225.055:56953): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838225.057:56954): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=451293 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838225.105:56955): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838225.105:56956): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838225.118:56957): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838225.118:56958): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838225.119:56959): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=451306 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838225.150:56960): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838225.150:56961): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838225.164:56962): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838225.164:56963): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838225.166:56964): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=451320 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1771838225.231:56965): pid=451336 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1771838225.231:56966): pid=451336 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D686976726B7569677A72726D7663676872626B6F7866727065706963666965203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313737313833383232342E393734333031382D313639372D3132333235363634393630363231322F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1771838225.232:56967): pid=451336 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1771838225.234:56968): pid=451336 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838225.447:56969): pid=451336 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1771838225.448:56970): pid=451336 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838225.452:56971): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838225.452:56972): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838225.492:56973): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838225.492:56974): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838225.494:56975): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=451339 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838225.542:56976): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838225.543:56977): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838225.569:56978): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838225.569:56979): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838225.570:56980): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=451352 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838225.601:56981): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838225.601:56982): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838225.621:56983): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838225.622:56984): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838225.623:56985): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=451366 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1771838225.687:56986): pid=451382 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1771838225.688:56987): pid=451382 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F70667762797A666F75796A7072706E6A796B677A756E706D6D73676B756565203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313737313833383232342E393734333031382D313639372D3132333235363634393630363231322F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1771838225.689:56988): pid=451382 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1771838225.692:56989): pid=451382 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838225.910:56990): pid=451382 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1771838225.910:56991): pid=451382 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838225.914:56992): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838225.914:56993): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838225.939:56994): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838225.939:56995): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838225.942:56996): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=451386 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838225.971:56997): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838225.971:56998): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838225.995:56999): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838225.995:57000): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838225.997:57001): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=451399 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838226.031:57002): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838226.031:57003): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838226.036:57004): pid=451419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=451419 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771838226.037:57005): pid=451385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=451419 suid=74 rport=41522 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.38.97 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771838226.037:57006): pid=451385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=451419 suid=74 rport=41522 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.38.97 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_LOGIN msg=audit(1771838226.162:57007): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838226.162:57008): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838226.164:57009): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=451420 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838226.196:57010): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838226.196:57011): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838226.219:57012): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838226.219:57013): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838226.220:57014): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=451433 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838226.231:57015): pid=451385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=451385 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771838226.231:57016): pid=451385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=209.38.38.97 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_END msg=audit(1771838226.272:57017): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838226.272:57018): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838226.286:57019): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838226.286:57020): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838226.287:57021): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=451446 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838226.318:57022): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838226.318:57023): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838226.336:57024): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838226.337:57025): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838226.338:57026): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=451460 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1771838226.403:57027): pid=451476 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1771838226.403:57028): pid=451476 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D61746E6C6E62666B6F75647271716273716D6E7965796E636E6D707A66726373203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313737313833383232352E3937333933312D313639372D363331303139373031373436342F416E736962616C6C5A5F636F70792E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1771838226.404:57029): pid=451476 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1771838226.407:57030): pid=451476 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838226.624:57031): pid=451476 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1771838226.624:57032): pid=451476 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838226.628:57033): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838226.628:57034): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838226.659:57035): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838226.659:57036): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838226.660:57037): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=451479 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838226.711:57038): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838226.711:57039): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838226.726:57040): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838226.726:57041): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838226.727:57042): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=451492 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838226.755:57043): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838226.755:57044): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838226.768:57045): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838226.768:57046): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838226.769:57047): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=451506 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1771838226.835:57048): pid=451522 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1771838226.835:57049): pid=451522 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D67716F6C6C7A6976666E7673776D6E78746D6C726F6C61636D6A72656A7562203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313737313833383232352E3937333933312D313639372D363331303139373031373436342F416E736962616C6C5A5F73797374656D642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1771838226.836:57050): pid=451522 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1771838226.839:57051): pid=451522 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_LOGIN msg=audit(1771838227.123:57052): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771838227.123:57053): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771838227.184:57054): pid=451526 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771838227.185:57055): pid=451526 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771838227.185:57056): pid=451526 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=BPF msg=audit(1771838227.506:57057): prog-id=2239 op=LOAD
type=BPF msg=audit(1771838227.506:57058): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771838227.510:57059): prog-id=2240 op=LOAD
type=BPF msg=audit(1771838227.510:57060): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771838227.510:57061): prog-id=2241 op=LOAD
type=BPF msg=audit(1771838227.510:57062): prog-id=2242 op=LOAD
type=BPF msg=audit(1771838227.510:57063): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771838227.510:57064): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771838227.513:57065): prog-id=2243 op=LOAD
type=BPF msg=audit(1771838227.513:57066): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771838227.513:57067): prog-id=2244 op=LOAD
type=BPF msg=audit(1771838227.513:57068): prog-id=2245 op=LOAD
type=BPF msg=audit(1771838227.513:57069): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771838227.514:57070): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771838227.520:57071): prog-id=2246 op=LOAD
type=BPF msg=audit(1771838227.520:57072): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771838227.522:57073): prog-id=2247 op=LOAD
type=BPF msg=audit(1771838227.522:57074): prog-id=2248 op=LOAD
type=BPF msg=audit(1771838227.522:57075): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771838227.522:57076): prog-id=0 op=UNLOAD
type=USER_START msg=audit(1771838227.532:57077): pid=451526 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771838227.542:57078): pid=451526 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771838227.543:57079): pid=451526 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771838227.547:57080): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771838227.547:57081): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771838227.550:57082): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771838227.550:57083): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771838227.561:57084): pid=451581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=451581 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_END msg=audit(1771838227.567:57085): pid=451522 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1771838227.567:57086): pid=451522 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838227.589:57087): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838227.589:57088): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838227.637:57089): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838227.637:57090): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838227.639:57091): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=451592 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1771838227.646:57092): pid=451577 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771838227.647:57093): pid=451577 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6365706861646D2E64343332396666306235383338396131633837343432376536666138636461646332353435303739313137633737343464643965646634613365346663383366202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771838227.648:57094): pid=451577 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771838227.652:57095): pid=451577 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771838227.714:57096): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838227.714:57097): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838227.736:57098): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838227.736:57099): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838227.738:57100): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=451606 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=CRYPTO_SESSION msg=audit(1771838227.760:57101): pid=451575 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=451581 suid=74 rport=59042 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771838227.760:57102): pid=451575 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=451581 suid=74 rport=59042 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_END msg=audit(1771838227.768:57103): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838227.769:57104): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838227.787:57105): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838227.787:57106): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838227.789:57107): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=451620 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1771838227.857:57108): pid=451636 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1771838227.857:57109): pid=451636 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D756466706776777A6D686472646B6D7274626F6C73686B726D706F6E746C7678203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313737313833383232352E3937333933312D313639372D363331303139373031373436342F416E736962616C6C5A5F73797374656D642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1771838227.858:57110): pid=451636 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1771838227.861:57111): pid=451636 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838227.980:57112): pid=451575 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=451575 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771838227.980:57113): pid=451575 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_END msg=audit(1771838228.335:57114): pid=451577 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771838228.335:57115): pid=451577 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771838228.393:57116): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771838228.393:57117): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=BPF msg=audit(1771838228.544:57118): prog-id=2249 op=LOAD
type=BPF msg=audit(1771838228.544:57119): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771838228.548:57120): prog-id=2250 op=LOAD
type=BPF msg=audit(1771838228.548:57121): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771838228.548:57122): prog-id=2251 op=LOAD
type=BPF msg=audit(1771838228.548:57123): prog-id=2252 op=LOAD
type=BPF msg=audit(1771838228.548:57124): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771838228.548:57125): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771838228.551:57126): prog-id=2253 op=LOAD
type=BPF msg=audit(1771838228.552:57127): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771838228.552:57128): prog-id=2254 op=LOAD
type=BPF msg=audit(1771838228.552:57129): prog-id=2255 op=LOAD
type=BPF msg=audit(1771838228.552:57130): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771838228.552:57131): prog-id=0 op=UNLOAD
type=USER_LOGIN msg=audit(1771838228.558:57132): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771838228.558:57133): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=BPF msg=audit(1771838228.559:57134): prog-id=2256 op=LOAD
type=BPF msg=audit(1771838228.559:57135): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771838228.560:57136): prog-id=2257 op=LOAD
type=BPF msg=audit(1771838228.560:57137): prog-id=2258 op=LOAD
type=BPF msg=audit(1771838228.560:57138): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771838228.560:57139): prog-id=0 op=UNLOAD
type=USER_ACCT msg=audit(1771838228.625:57140): pid=451709 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771838228.625:57141): pid=451709 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771838228.626:57142): pid=451709 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771838228.631:57143): pid=451709 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771838228.635:57144): pid=451709 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771838228.635:57145): pid=451709 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771838228.639:57146): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771838228.639:57147): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=BPF msg=audit(1771838228.754:57148): prog-id=2259 op=LOAD
type=SYSCALL msg=audit(1771838228.754:57148): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffe3b069260 a2=90 a3=9500000001 items=0 ppid=451741 pid=451742 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1771838228.754:57148): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F393034363766366561353763643931653863633966616462376332383735
type=SERVICE_START msg=audit(1771838228.822:57149): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1771838228.824:57150): pid=451747 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_CMD msg=audit(1771838228.824:57151): pid=451747 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd="kolla_set_configs" exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="unset"
type=CRED_REFR msg=audit(1771838228.825:57152): pid=451747 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838228.884:57153): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1771838228.927:57154): pid=451768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_ACQ msg=audit(1771838228.927:57155): pid=451768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_ROLE_CHANGE msg=audit(1771838228.928:57156): pid=451768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1771838228.928:57157): pid=451768 uid=0 subj=system_u:system_r:init_t:s0 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=221 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1771838228.928:57157): arch=c000003e syscall=1 success=yes exit=1 a0=7 a1=7ffdc1fc8400 a2=1 a3=0 items=0 ppid=1 pid=451768 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=221 comm="(systemd)" exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1771838228.928:57157): proctitle="(systemd)"
type=USER_START msg=audit(1771838228.930:57158): pid=451768 uid=0 auid=0 ses=221 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=BPF msg=audit(1771838228.956:57159): prog-id=2260 op=LOAD
type=SYSCALL msg=audit(1771838228.956:57159): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffe6afd0be0 a2=90 a3=0 items=0 ppid=1 pid=451768 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=221 comm="systemd" exe="/usr/lib/systemd/systemd" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1771838228.956:57159): proctitle="(systemd)"
type=BPF msg=audit(1771838228.956:57160): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771838228.956:57161): prog-id=2261 op=LOAD
type=SYSCALL msg=audit(1771838228.956:57161): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffe6afd0c80 a2=90 a3=4 items=0 ppid=1 pid=451768 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=221 comm="systemd" exe="/usr/lib/systemd/systemd" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1771838228.956:57161): proctitle="(systemd)"
type=BPF msg=audit(1771838228.957:57162): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1771838229.098:57163): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838229.124:57164): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=BPF msg=audit(1771838229.463:57165): prog-id=2262 op=LOAD
type=BPF msg=audit(1771838229.463:57166): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771838229.468:57167): prog-id=2263 op=LOAD
type=BPF msg=audit(1771838229.468:57168): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771838229.468:57169): prog-id=2264 op=LOAD
type=BPF msg=audit(1771838229.468:57170): prog-id=2265 op=LOAD
type=BPF msg=audit(1771838229.468:57171): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771838229.468:57172): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771838229.472:57173): prog-id=2266 op=LOAD
type=BPF msg=audit(1771838229.472:57174): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771838229.472:57175): prog-id=2267 op=LOAD
type=BPF msg=audit(1771838229.472:57176): prog-id=2268 op=LOAD
type=BPF msg=audit(1771838229.472:57177): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771838229.472:57178): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771838229.479:57179): prog-id=2269 op=LOAD
type=BPF msg=audit(1771838229.479:57180): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771838229.481:57181): prog-id=2270 op=LOAD
type=BPF msg=audit(1771838229.481:57182): prog-id=2271 op=LOAD
type=BPF msg=audit(1771838229.481:57183): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771838229.481:57184): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1771838229.491:57185): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=edpm_ovn_controller comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1771838229.501:57186): pid=451747 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1771838229.542:57187): pid=451636 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1771838229.543:57188): pid=451636 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838229.548:57189): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838229.548:57190): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838229.568:57191): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838229.568:57192): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838229.569:57193): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=451842 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838229.577:57194): pid=451747 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1771838229.577:57195): pid=451747 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1771838229.589:57196): pid=451850 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_CMD msg=audit(1771838229.589:57197): pid=451850 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd="kolla_copy_cacerts" exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="unset"
type=CRED_REFR msg=audit(1771838229.590:57198): pid=451850 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1771838229.597:57199): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838229.597:57200): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838229.614:57201): pid=451850 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1771838229.617:57202): pid=451850 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1771838229.617:57203): pid=451850 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1771838229.870:57204): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838229.870:57205): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838229.872:57206): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=451864 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838229.904:57207): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838229.904:57208): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838229.915:57209): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838229.915:57210): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838229.916:57211): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=451877 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838229.941:57212): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838229.941:57213): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838230.124:57214): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838230.124:57215): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838230.126:57216): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=451897 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838230.175:57217): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838230.176:57218): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838230.190:57219): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838230.190:57220): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838230.192:57221): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=451910 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838230.225:57222): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838230.226:57223): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838230.238:57224): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838230.238:57225): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838230.240:57226): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=451924 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838230.497:57227): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838230.498:57228): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838230.518:57229): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838230.518:57230): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838230.519:57231): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=451941 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838230.548:57232): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838230.548:57233): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838231.073:57234): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838231.073:57235): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838231.074:57236): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=451956 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838231.105:57237): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838231.105:57238): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838231.118:57239): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838231.118:57240): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838231.120:57241): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=451969 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838231.156:57242): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838231.156:57243): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838231.187:57244): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838231.187:57245): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838231.189:57246): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=451988 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838231.243:57247): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838231.243:57248): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838231.256:57249): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838231.256:57250): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838231.257:57251): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=452001 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838231.288:57252): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838231.288:57253): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838231.301:57254): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838231.301:57255): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838231.302:57256): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=452015 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1771838231.367:57257): pid=452031 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1771838231.367:57258): pid=452031 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B6F7764666D6B6C62786E7A69776A6C75746A6F66666973657A6E6762746C6C203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313737313833383233312E313037383737372D313833332D37383331303731323230383934372F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1771838231.368:57259): pid=452031 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1771838231.374:57260): pid=452031 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838231.583:57261): pid=452031 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1771838231.583:57262): pid=452031 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838231.588:57263): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838231.588:57264): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838231.608:57265): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838231.608:57266): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838231.610:57267): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=452034 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838231.640:57268): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838231.641:57269): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838231.652:57270): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838231.652:57271): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838231.653:57272): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=452047 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838231.674:57273): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838231.674:57274): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838231.690:57275): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838231.690:57276): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838231.691:57277): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=452061 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838231.732:57278): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838231.732:57279): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838231.745:57280): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838231.745:57281): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838231.746:57282): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=452074 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838231.769:57283): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838231.769:57284): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838231.781:57285): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838231.781:57286): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838231.782:57287): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=452088 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1771838231.826:57288): pid=452104 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1771838231.826:57289): pid=452104 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D616B67656E7664726169787A6D63757478677264687469747766697968746668203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313737313833383233312E313037383737372D313833332D37383331303731323230383934372F416E736962616C6C5A5F636F70792E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1771838231.827:57290): pid=452104 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1771838231.829:57291): pid=452104 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838232.065:57292): pid=452104 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1771838232.065:57293): pid=452104 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838232.069:57294): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838232.069:57295): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838232.079:57296): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838232.080:57297): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838232.081:57298): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=452108 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838232.102:57299): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838232.103:57300): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838232.242:57301): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838232.242:57302): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838232.244:57303): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=452122 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838232.272:57304): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838232.272:57305): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838232.286:57306): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838232.286:57307): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838232.288:57308): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=452135 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838232.321:57309): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838232.322:57310): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838232.346:57311): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838232.347:57312): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838232.348:57313): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=452154 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838232.390:57314): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838232.390:57315): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838232.401:57316): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838232.401:57317): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838232.402:57318): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=452167 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838232.428:57319): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838232.428:57320): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838232.445:57321): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838232.445:57322): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838232.447:57323): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=452181 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1771838232.511:57324): pid=452197 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1771838232.511:57325): pid=452197 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6274626367666373746E6E66766970766973626D79747A686675666B7074727A203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313737313833383233322E3237343438332D313837382D36393537313039323037333830312F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1771838232.512:57326): pid=452197 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1771838232.514:57327): pid=452197 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838232.752:57328): pid=452197 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1771838232.753:57329): pid=452197 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838232.756:57330): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838232.756:57331): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838232.772:57332): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838232.772:57333): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838232.774:57334): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=452201 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838232.802:57335): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838232.802:57336): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838232.894:57337): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838232.894:57338): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838232.896:57339): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=452215 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838232.926:57340): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838232.926:57341): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838232.941:57342): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838232.941:57343): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838232.942:57344): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=452228 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838232.976:57345): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838232.976:57346): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838233.016:57347): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838233.016:57348): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838233.018:57349): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=452247 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838233.058:57350): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838233.058:57351): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838233.073:57352): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838233.073:57353): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838233.075:57354): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=452261 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838233.101:57355): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838233.101:57356): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838233.114:57357): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838233.114:57358): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838233.116:57359): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=452275 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1771838233.178:57360): pid=452291 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1771838233.178:57361): pid=452291 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D696869726D6D727979677562666777776D786B756D64786777636D6D756A6C6F203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313737313833383233322E393238333835372D313930312D363537323539333235303638352F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1771838233.178:57362): pid=452291 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1771838233.181:57363): pid=452291 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838233.455:57364): pid=452291 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1771838233.455:57365): pid=452291 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838233.459:57366): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838233.459:57367): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838233.477:57368): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838233.477:57369): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838233.478:57370): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=452297 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838233.507:57371): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838233.508:57372): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838233.871:57373): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838233.871:57374): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838233.873:57375): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=452314 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838233.902:57376): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838233.902:57377): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838233.915:57378): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838233.915:57379): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838233.916:57380): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=452327 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838233.952:57381): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838233.953:57382): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838233.978:57383): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838233.979:57384): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838233.980:57385): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=452346 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838234.024:57386): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838234.025:57387): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838234.036:57388): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838234.036:57389): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838234.038:57390): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=452360 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838234.068:57391): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838234.068:57392): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838234.083:57393): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838234.083:57394): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838234.085:57395): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=452374 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1771838234.148:57396): pid=452390 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1771838234.148:57397): pid=452390 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D647561637A6C617A6F796F75716969767267616D6D736D6B716D616E76796D6D203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313737313833383233332E3930343932392D313934302D3135393638383038373837383734302F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1771838234.149:57398): pid=452390 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1771838234.151:57399): pid=452390 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838234.413:57400): pid=452390 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1771838234.414:57401): pid=452390 uid=1000 auid=1000 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838234.418:57402): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838234.418:57403): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838234.438:57404): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838234.438:57405): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838234.439:57406): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=452394 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838234.469:57407): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838234.469:57408): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838234.865:57409): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=443734 suid=1000 rport=55878 laddr=192.168.122.105 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.31 terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838234.865:57410): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=443734 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838234.868:57411): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=192.168.122.31 addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_DISP msg=audit(1771838234.868:57412): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=192.168.122.31 addr=192.168.122.31 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838234.869:57413): pid=443731 uid=0 auid=1000 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=443731 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="root"
type=SERVICE_START msg=audit(1771838238.034:57414): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838238.276:57415): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1771838239.777:57416): pid=451775 uid=0 auid=0 ses=221 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="root"
type=SERVICE_STOP msg=audit(1771838239.778:57417): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838239.812:57418): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771838240.224:57419): pid=452449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=452449 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771838240.225:57420): pid=452448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=452449 suid=74 rport=43294 laddr=192.168.122.105 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771838240.225:57421): pid=452448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=452449 suid=74 rport=43294 laddr=192.168.122.105 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1771838240.319:57422): pid=452448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771838240.319:57423): pid=452448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:fd:28:52:d8:9e:43:ab:ba:3d:3f:9f:5e:fc:d9:a0:40:e4:52:01:c2:4e:07:0b:b8:e8:7b:a8:d3:71:c1:74:1e exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1771838240.348:57424): pid=452448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=192.168.122.30 addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771838240.349:57425): pid=452448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=452449 suid=74 rport=43294 laddr=192.168.122.105 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1771838240.352:57426): pid=452448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=192.168.122.30 addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1771838240.352:57427): pid=452448 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=222 res=1UID="root" OLD-AUID="unset" AUID="zuul"
type=SYSCALL msg=audit(1771838240.352:57427): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffd8e624520 a2=4 a3=3e8 items=0 ppid=416325 pid=452448 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=222 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1771838240.352:57427): proctitle=737368643A207A75756C205B707269765D
type=USER_ROLE_CHANGE msg=audit(1771838240.354:57428): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.30 addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_START msg=audit(1771838240.389:57429): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=192.168.122.30 addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838240.390:57430): pid=452451 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=452451 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="root"
type=CRED_ACQ msg=audit(1771838240.392:57431): pid=452451 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=192.168.122.30 addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_LOGIN msg=audit(1771838240.435:57432): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838240.435:57433): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838240.437:57434): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=452452 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838240.472:57435): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838240.472:57436): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838240.484:57437): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838240.484:57438): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838240.485:57439): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=452465 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838240.523:57440): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838240.523:57441): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838240.840:57442): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838240.840:57443): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838240.842:57444): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=452484 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838240.874:57445): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838240.874:57446): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838240.901:57447): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838240.901:57448): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838240.904:57449): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=452498 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838240.970:57450): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838240.970:57451): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838240.985:57452): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838240.985:57453): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838240.986:57454): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=452511 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838241.018:57455): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838241.018:57456): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838241.034:57457): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838241.034:57458): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838241.036:57459): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=452525 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838241.682:57460): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838241.682:57461): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838241.694:57462): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838241.694:57463): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838241.696:57464): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=452547 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838241.728:57465): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838241.728:57466): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838241.920:57467): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838241.920:57468): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838241.921:57469): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=452561 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838241.951:57470): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838241.951:57471): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838241.961:57472): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838241.962:57473): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838241.963:57474): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=452574 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838241.999:57475): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838241.999:57476): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838242.169:57477): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838242.169:57478): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838242.171:57479): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=452594 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838242.248:57480): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838242.248:57481): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838242.264:57482): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838242.264:57483): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838242.266:57484): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=452607 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838242.299:57485): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838242.299:57486): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838242.318:57487): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838242.318:57488): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838242.320:57489): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=452621 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1771838242.390:57490): pid=452637 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1771838242.390:57491): pid=452637 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6971796D636D6D7A757871756E667374776A7564617462786775616161726670203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313737313833383234312E3935333335332D35392D3139323530343334343231363636342F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1771838242.391:57492): pid=452637 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1771838242.418:57493): pid=452637 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=SERVICE_START msg=audit(1771838242.421:57494): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838242.545:57495): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838242.549:57496): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838242.558:57497): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1771838242.643:57498): pid=452637 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1771838242.643:57499): pid=452637 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838242.648:57500): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838242.648:57501): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838242.662:57502): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838242.662:57503): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838242.663:57504): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=452712 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=SERVICE_START msg=audit(1771838242.666:57505): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838242.726:57506): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1771838242.731:57507): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838242.731:57508): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838242.764:57509): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838242.764:57510): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838242.765:57511): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=452755 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838242.793:57512): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838242.793:57513): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838242.816:57514): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838242.816:57515): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838242.817:57516): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=452782 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838242.855:57517): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838242.855:57518): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838242.897:57519): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838242.897:57520): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838242.898:57521): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=452820 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=SERVICE_STOP msg=audit(1771838242.923:57522): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1771838242.940:57523): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=SERVICE_STOP msg=audit(1771838242.940:57524): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGOUT msg=audit(1771838242.940:57525): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838242.954:57526): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838242.954:57527): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838242.955:57528): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=452841 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=SERVICE_STOP msg=audit(1771838242.971:57529): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1771838242.982:57530): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838242.983:57531): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=SERVICE_STOP msg=audit(1771838242.992:57532): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1771838243.004:57533): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838243.004:57534): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838243.006:57535): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=452856 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1771838243.070:57536): pid=452872 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1771838243.070:57537): pid=452872 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D636B676F6C6D66726A6169626D666969777572626561796E7962627673617A61203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313737313833383234322E383032383935382D35392D3237383935393631353431313432362F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1771838243.072:57538): pid=452872 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1771838243.076:57539): pid=452872 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838243.309:57540): pid=452872 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1771838243.310:57541): pid=452872 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838243.315:57542): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838243.315:57543): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838243.332:57544): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838243.332:57545): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838243.334:57546): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=452876 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838243.367:57547): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838243.367:57548): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838243.408:57549): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838243.408:57550): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838243.409:57551): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=452890 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838243.439:57552): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838243.440:57553): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838243.455:57554): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838243.455:57555): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838243.457:57556): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=452903 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838243.494:57557): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838243.494:57558): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838243.514:57559): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838243.514:57560): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838243.516:57561): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=452922 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838243.565:57562): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838243.565:57563): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838243.590:57564): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838243.590:57565): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838243.592:57566): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=452935 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838243.622:57567): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838243.622:57568): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838243.637:57569): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838243.637:57570): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838243.638:57571): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=452949 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1771838243.694:57572): pid=452965 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1771838243.694:57573): pid=452965 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7870706370676C686C66756C787A736F6A64616D66626D746E7166746A717467203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313737313833383234332E343435393232392D35392D33333332333935373432353537352F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1771838243.695:57574): pid=452965 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1771838243.697:57575): pid=452965 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838243.968:57576): pid=452965 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1771838243.968:57577): pid=452965 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838243.971:57578): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838243.971:57579): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838244.134:57580): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838244.134:57581): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838244.135:57582): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=452969 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838244.154:57583): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838244.154:57584): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838244.182:57585): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838244.182:57586): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838244.183:57587): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=452983 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838244.202:57588): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838244.203:57589): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838244.218:57590): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838244.218:57591): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838244.219:57592): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=452996 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838244.255:57593): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838244.255:57594): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838244.276:57595): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838244.276:57596): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838244.277:57597): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=453015 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838244.356:57598): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838244.356:57599): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838244.356:57600): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838244.356:57601): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838244.358:57602): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=453028 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838244.389:57603): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838244.389:57604): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838244.403:57605): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838244.403:57606): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838244.404:57607): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=453042 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1771838244.467:57608): pid=453058 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1771838244.467:57609): pid=453058 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A6E746271696E616B696A68666D6C68636E6966706D6A6862717971756B7965203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313737313833383234342E3230393832362D35392D3235353234303433333638343336382F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1771838244.469:57610): pid=453058 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1771838244.471:57611): pid=453058 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838244.697:57612): pid=453058 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1771838244.697:57613): pid=453058 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838244.700:57614): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838244.701:57615): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838244.713:57616): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838244.713:57617): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838244.715:57618): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=453061 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838244.738:57619): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838244.738:57620): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838244.763:57621): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838244.763:57622): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838244.764:57623): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=453075 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838244.790:57624): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838244.791:57625): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838244.803:57626): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838244.804:57627): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838244.805:57628): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=453088 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838244.836:57629): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838244.836:57630): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838244.857:57631): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838244.857:57632): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838244.858:57633): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=453107 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838244.903:57634): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838244.903:57635): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838244.914:57636): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838244.914:57637): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838244.916:57638): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=453120 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838244.946:57639): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838244.946:57640): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838244.957:57641): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838244.958:57642): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838244.959:57643): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=453134 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1771838245.010:57644): pid=453150 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1771838245.010:57645): pid=453150 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A6E64766F6D726E696969786A616B6C736D746C77676A79706C717A656E7462203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313737313833383234342E373934363139332D35392D3138353438343439353537393333332F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1771838245.011:57646): pid=453150 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1771838245.014:57647): pid=453150 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838245.193:57648): pid=453150 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1771838245.193:57649): pid=453150 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838245.197:57650): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838245.197:57651): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838245.222:57652): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838245.222:57653): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838245.224:57654): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=453154 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838245.253:57655): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838245.253:57656): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838245.334:57657): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838245.334:57658): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838245.336:57659): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=453168 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838245.366:57660): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838245.366:57661): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838245.381:57662): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838245.381:57663): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838245.383:57664): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=453181 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838245.419:57665): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838245.419:57666): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838245.441:57667): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838245.441:57668): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838245.443:57669): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=453200 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838245.504:57670): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838245.505:57671): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838245.518:57672): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838245.518:57673): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838245.519:57674): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=453213 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838245.553:57675): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838245.553:57676): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838245.565:57677): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838245.565:57678): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838245.566:57679): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=453227 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838245.969:57680): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838245.969:57681): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838245.992:57682): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838245.992:57683): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838245.993:57684): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=453244 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838246.023:57685): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838246.023:57686): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838246.113:57687): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838246.113:57688): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838246.115:57689): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=453259 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838246.145:57690): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838246.145:57691): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838246.169:57692): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838246.169:57693): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838246.170:57694): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=453272 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838246.206:57695): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838246.206:57696): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838246.400:57697): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838246.400:57698): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838246.402:57699): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=453291 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838246.456:57700): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838246.456:57701): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838246.475:57702): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838246.475:57703): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838246.476:57704): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=453304 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838246.506:57705): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838246.506:57706): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838246.518:57707): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838246.518:57708): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838246.519:57709): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=453318 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1771838246.582:57710): pid=453334 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1771838246.582:57711): pid=453334 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6261726D61656D74776D726C636368736A746D6C7266626C65776A716E7A7278203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313737313833383234362E31343837342D3139312D3130343339363735383436383433382F416E736962616C6C5A5F7365626F6F6C65616E2E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1771838246.583:57712): pid=453334 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1771838246.585:57713): pid=453334 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838246.999:57714): pid=453334 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1771838247.000:57715): pid=453334 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838247.003:57716): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838247.003:57717): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838247.020:57718): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838247.020:57719): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838247.021:57720): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=453337 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838247.049:57721): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838247.049:57722): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838247.143:57723): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838247.143:57724): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838247.144:57725): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=453352 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838247.173:57726): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838247.173:57727): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838247.186:57728): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838247.186:57729): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838247.187:57730): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=453365 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838247.221:57731): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838247.221:57732): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838247.404:57733): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838247.404:57734): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838247.406:57735): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=453384 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838247.472:57736): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838247.472:57737): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838247.485:57738): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838247.485:57739): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838247.486:57740): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=453397 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838247.515:57741): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838247.515:57742): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838247.527:57743): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838247.527:57744): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838247.529:57745): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=453411 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838247.802:57746): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838247.802:57747): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838247.823:57748): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838247.824:57749): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838247.825:57750): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=453429 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838247.859:57751): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838247.859:57752): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838247.876:57753): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838247.877:57754): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838247.878:57755): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=453442 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838247.908:57756): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838247.908:57757): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838248.004:57758): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838248.004:57759): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838248.006:57760): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=453456 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838248.066:57761): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838248.066:57762): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838248.081:57763): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838248.081:57764): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838248.082:57765): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=453470 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838248.113:57766): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838248.113:57767): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838248.125:57768): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838248.125:57769): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838248.126:57770): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=453484 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838248.391:57771): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838248.391:57772): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838248.408:57773): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838248.409:57774): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838248.410:57775): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=453501 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838248.440:57776): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838248.440:57777): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838248.581:57778): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838248.582:57779): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838248.583:57780): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=453515 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838248.619:57781): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838248.619:57782): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838248.631:57783): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838248.631:57784): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838248.633:57785): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=453528 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838248.665:57786): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838248.666:57787): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838248.712:57788): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838248.712:57789): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838248.714:57790): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=453547 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838249.030:57791): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838249.030:57792): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838249.042:57793): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838249.042:57794): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838249.044:57795): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=453560 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838249.075:57796): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838249.075:57797): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838249.098:57798): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838249.098:57799): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838249.100:57800): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=453575 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838249.345:57801): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838249.345:57802): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838249.365:57803): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838249.365:57804): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838249.387:57805): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=453592 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838249.425:57806): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838249.425:57807): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838249.440:57808): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838249.440:57809): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838249.441:57810): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=453605 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838249.471:57811): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838249.471:57812): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838249.499:57813): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838249.499:57814): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838249.500:57815): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=453619 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838249.558:57816): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838249.558:57817): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838249.574:57818): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838249.574:57819): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838249.575:57820): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=453632 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838249.605:57821): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838249.605:57822): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838249.619:57823): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838249.620:57824): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838249.620:57825): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=453646 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838249.875:57826): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838249.875:57827): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838249.885:57828): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838249.885:57829): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838249.887:57830): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=453663 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838249.918:57831): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838249.918:57832): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838250.148:57833): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838250.148:57834): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838250.150:57835): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=453678 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838250.181:57836): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838250.181:57837): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838250.190:57838): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838250.190:57839): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838250.192:57840): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=453691 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838250.227:57841): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838250.227:57842): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838250.255:57843): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838250.256:57844): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838250.257:57845): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=453710 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838250.332:57846): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838250.333:57847): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838250.367:57848): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838250.367:57849): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838250.369:57850): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=453723 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838250.402:57851): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838250.402:57852): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838250.415:57853): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838250.415:57854): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838250.416:57855): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=453737 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1771838250.483:57856): pid=453753 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1771838250.483:57857): pid=453753 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6177786B78736E676161686469776F62656668716F6A7970686F647763656661203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313737313833383235302E313833313831352D3331312D3138373636343833323930313038312F416E736962616C6C5A5F73657475702E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1771838250.484:57858): pid=453753 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1771838250.486:57859): pid=453753 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838251.054:57860): pid=453753 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1771838251.054:57861): pid=453753 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838251.058:57862): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838251.058:57863): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838251.301:57864): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838251.301:57865): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838251.303:57866): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=453765 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838251.376:57867): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838251.376:57868): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838251.389:57869): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838251.390:57870): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838251.391:57871): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=453778 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838251.425:57872): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838251.425:57873): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838251.437:57874): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838251.437:57875): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838251.439:57876): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=453792 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1771838251.505:57877): pid=453808 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1771838251.505:57878): pid=453808 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D616664796679737A6C6B74737469716D6E7471646A656E756A65797379707A7A203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313737313833383235302E313833313831352D3331312D3138373636343833323930313038312F416E736962616C6C5A5F646E662E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1771838251.506:57879): pid=453808 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1771838251.510:57880): pid=453808 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838252.961:57881): pid=453815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=453815 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771838253.015:57882): pid=453814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=453815 suid=74 rport=43194 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771838253.015:57883): pid=453814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=453815 suid=74 rport=43194 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771838253.098:57884): pid=453814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=453814 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771838253.098:57885): pid=453814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_END msg=audit(1771838255.118:57886): pid=453808 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1771838255.119:57887): pid=453808 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838255.123:57888): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838255.123:57889): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838255.161:57890): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838255.161:57891): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838255.162:57892): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=453819 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838255.189:57893): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838255.189:57894): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838255.267:57895): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838255.267:57896): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838255.268:57897): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=453833 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838255.297:57898): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838255.297:57899): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838255.310:57900): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838255.310:57901): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838255.311:57902): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=453846 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838255.344:57903): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838255.345:57904): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838255.655:57905): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838255.655:57906): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838255.657:57907): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=453865 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838255.729:57908): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838255.729:57909): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838255.747:57910): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838255.747:57911): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838255.749:57912): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=453892 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838255.784:57913): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838255.784:57914): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838255.796:57915): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838255.796:57916): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838255.798:57917): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=453912 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1771838255.866:57918): pid=453938 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1771838255.867:57919): pid=453938 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F75776870756366776D616C69746E73796170616F74616362737469626F6D7A203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313737313833383235352E333030303832372D3334372D3136373331333435333938343139352F416E736962616C6C5A5F73797374656D642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1771838255.868:57920): pid=453938 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1771838255.873:57921): pid=453938 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838256.239:57922): pid=453938 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1771838256.239:57923): pid=453938 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838256.243:57924): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838256.243:57925): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838256.260:57926): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838256.260:57927): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838256.261:57928): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=453945 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838256.285:57929): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838256.285:57930): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838256.448:57931): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838256.448:57932): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838256.449:57933): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=453959 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838256.478:57934): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838256.478:57935): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838256.493:57936): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838256.493:57937): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838256.494:57938): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=453972 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838256.529:57939): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838256.529:57940): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838256.560:57941): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838256.560:57942): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838256.561:57943): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=453991 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838256.621:57944): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838256.621:57945): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838256.637:57946): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838256.637:57947): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838256.639:57948): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=454004 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838256.668:57949): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838256.668:57950): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838256.685:57951): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838256.685:57952): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838256.686:57953): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=454018 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838256.925:57954): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838256.925:57955): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838256.943:57956): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838256.943:57957): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838256.946:57958): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=454035 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838256.985:57959): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838256.985:57960): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838257.000:57961): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838257.000:57962): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838257.001:57963): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=454048 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838257.032:57964): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838257.032:57965): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838257.057:57966): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838257.058:57967): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838257.059:57968): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=454062 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838257.108:57969): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838257.108:57970): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838257.119:57971): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838257.120:57972): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838257.121:57973): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=454076 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838257.149:57974): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838257.149:57975): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838257.161:57976): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838257.161:57977): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838257.162:57978): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=454090 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838257.437:57979): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838257.438:57980): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838257.450:57981): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838257.450:57982): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838257.452:57983): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=454107 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838257.480:57984): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838257.480:57985): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838257.511:57986): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838257.512:57987): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838257.513:57988): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=454121 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838257.541:57989): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838257.541:57990): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838257.556:57991): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838257.556:57992): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838257.558:57993): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=454134 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838257.592:57994): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838257.592:57995): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838257.621:57996): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838257.621:57997): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838257.623:57998): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=454153 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838257.671:57999): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838257.671:58000): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838257.682:58001): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838257.682:58002): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838257.684:58003): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=454166 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838257.711:58004): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838257.711:58005): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838257.722:58006): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838257.723:58007): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838257.724:58008): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=454180 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838257.996:58009): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838257.996:58010): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838258.013:58011): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838258.013:58012): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838258.015:58013): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=454197 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838258.056:58014): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838258.056:58015): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838258.072:58016): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838258.072:58017): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838258.073:58018): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=454210 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838258.100:58019): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838258.100:58020): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838258.129:58021): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838258.129:58022): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838258.131:58023): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=454225 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838258.173:58024): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838258.173:58025): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838258.196:58026): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838258.196:58027): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838258.197:58028): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=454238 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838258.223:58029): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838258.223:58030): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838258.237:58031): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838258.237:58032): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838258.238:58033): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=454252 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838258.492:58034): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838258.492:58035): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838258.504:58036): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838258.505:58037): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838258.505:58038): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=454269 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838258.528:58039): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838258.528:58040): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838259.150:58041): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838259.151:58042): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838259.152:58043): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=454284 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838259.182:58044): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838259.182:58045): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838259.195:58046): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838259.196:58047): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838259.197:58048): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=454297 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838259.232:58049): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838259.233:58050): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838259.260:58051): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838259.260:58052): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838259.262:58053): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=454316 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838259.313:58054): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838259.314:58055): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838259.333:58056): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838259.333:58057): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838259.334:58058): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=454329 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838259.364:58059): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838259.364:58060): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838259.380:58061): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838259.380:58062): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838259.382:58063): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=454343 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838259.580:58064): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838259.581:58065): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838259.595:58066): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838259.595:58067): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838259.597:58068): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=454360 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838259.631:58069): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838259.631:58070): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838259.643:58071): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838259.643:58072): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838259.645:58073): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=454373 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838259.674:58074): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838259.674:58075): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838259.693:58076): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838259.693:58077): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838259.695:58078): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=454387 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838259.742:58079): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838259.742:58080): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838259.754:58081): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838259.754:58082): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838259.756:58083): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=454400 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838259.782:58084): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838259.782:58085): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838259.794:58086): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838259.794:58087): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838259.796:58088): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=454414 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838260.025:58089): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838260.026:58090): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=SERVICE_START msg=audit(1771838260.034:58091): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1771838260.170:58092): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838260.170:58093): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838260.171:58094): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=454456 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838260.204:58095): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838260.204:58096): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=SERVICE_STOP msg=audit(1771838260.223:58097): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1771838260.223:58098): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838260.223:58099): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838260.225:58100): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=454472 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838260.256:58101): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838260.257:58102): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838260.270:58103): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838260.270:58104): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838260.272:58105): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=454485 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838260.307:58106): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838260.307:58107): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838260.330:58108): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838260.330:58109): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838260.332:58110): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=454504 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838260.381:58111): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838260.381:58112): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838260.399:58113): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838260.399:58114): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838260.401:58115): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=454517 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838260.429:58116): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838260.429:58117): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838260.441:58118): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838260.441:58119): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838260.442:58120): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=454531 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838260.685:58121): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838260.685:58122): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838260.706:58123): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838260.706:58124): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838260.708:58125): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=454548 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838260.741:58126): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838260.741:58127): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838260.760:58128): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838260.760:58129): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838260.761:58130): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=454561 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838260.786:58131): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838260.787:58132): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838260.819:58133): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838260.819:58134): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838260.820:58135): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=454575 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838260.866:58136): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838260.866:58137): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838260.880:58138): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838260.880:58139): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838260.882:58140): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=454588 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838260.912:58141): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838260.912:58142): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838260.927:58143): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838260.927:58144): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838260.929:58145): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=454602 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838261.182:58146): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838261.182:58147): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838261.206:58148): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838261.206:58149): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838261.208:58150): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=454620 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838261.241:58151): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838261.241:58152): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838261.361:58153): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838261.362:58154): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838261.363:58155): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=454634 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838261.391:58156): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838261.391:58157): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838261.405:58158): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838261.405:58159): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838261.406:58160): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=454647 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838261.442:58161): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838261.442:58162): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838261.467:58163): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838261.467:58164): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838261.469:58165): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=454666 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838261.515:58166): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838261.516:58167): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838261.526:58168): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838261.526:58169): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838261.527:58170): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=454679 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838261.558:58171): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838261.558:58172): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838261.571:58173): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838261.571:58174): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838261.573:58175): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=454693 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838261.849:58176): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838261.849:58177): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838261.861:58178): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838261.862:58179): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838261.863:58180): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=454712 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838261.892:58181): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838261.892:58182): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838262.040:58183): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838262.040:58184): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838262.042:58185): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=454726 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838262.071:58186): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838262.071:58187): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838262.081:58188): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838262.082:58189): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838262.083:58190): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=454739 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838262.117:58191): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838262.118:58192): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838262.138:58193): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838262.138:58194): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838262.140:58195): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=454759 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838262.185:58196): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838262.185:58197): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838262.198:58198): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838262.198:58199): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838262.200:58200): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=454772 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838262.228:58201): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838262.229:58202): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838262.242:58203): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838262.242:58204): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838262.244:58205): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=454786 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1771838262.309:58206): pid=454802 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1771838262.310:58207): pid=454802 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D66726E6B7373766E6C6F6A7A6976696E7870727A616A656963757A726374796A203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313737313833383236322E303733353030322D3631392D35303437373534383837313139322F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1771838262.310:58208): pid=454802 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1771838262.314:58209): pid=454802 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838262.535:58210): pid=454802 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1771838262.536:58211): pid=454802 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838262.539:58212): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838262.539:58213): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838262.554:58214): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838262.554:58215): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838262.555:58216): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=454805 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838262.584:58217): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838262.584:58218): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838262.656:58219): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838262.656:58220): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838262.658:58221): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=454819 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838262.688:58222): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838262.688:58223): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838262.701:58224): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838262.701:58225): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838262.703:58226): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=454832 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838262.739:58227): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838262.739:58228): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838262.792:58229): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838262.793:58230): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838262.794:58231): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=454851 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838262.842:58232): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838262.842:58233): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838262.870:58234): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838262.871:58235): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838262.872:58236): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=454864 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838262.903:58237): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838262.904:58238): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838262.924:58239): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838262.924:58240): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838262.925:58241): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=454878 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1771838262.990:58242): pid=454894 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1771838262.990:58243): pid=454894 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D697966787861646E72726C7A656D78616F7868776867656C666B636B7A756770203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313737313833383236322E363931333734332D3634312D37303533333135323633333936312F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1771838262.991:58244): pid=454894 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1771838262.994:58245): pid=454894 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838263.229:58246): pid=454894 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1771838263.229:58247): pid=454894 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838263.233:58248): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838263.233:58249): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838263.278:58250): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838263.278:58251): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838263.280:58252): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=454900 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838263.330:58253): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838263.330:58254): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838263.344:58255): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838263.344:58256): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838263.346:58257): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=454913 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838263.377:58258): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838263.377:58259): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838263.392:58260): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838263.392:58261): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838263.393:58262): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=454927 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1771838263.458:58263): pid=454943 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1771838263.458:58264): pid=454943 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D717465746175776E6F6371686F746670627272757872636B727262737A7A6267203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313737313833383236322E363931333734332D3634312D37303533333135323633333936312F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1771838263.459:58265): pid=454943 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1771838263.461:58266): pid=454943 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838263.688:58267): pid=454943 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1771838263.689:58268): pid=454943 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838263.692:58269): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838263.692:58270): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838263.715:58271): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838263.715:58272): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838263.716:58273): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=454946 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838263.741:58274): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838263.741:58275): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838263.771:58276): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838263.771:58277): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838263.772:58278): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=454960 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838263.793:58279): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838263.793:58280): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838263.804:58281): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838263.804:58282): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838263.805:58283): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=454973 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838263.830:58284): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838263.830:58285): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838263.857:58286): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838263.857:58287): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838263.858:58288): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=454992 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838263.898:58289): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838263.898:58290): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838263.912:58291): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838263.912:58292): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838263.913:58293): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=455005 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838263.937:58294): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838263.937:58295): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838263.949:58296): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838263.949:58297): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838263.951:58298): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=455019 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1771838264.001:58299): pid=455035 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1771838264.001:58300): pid=455035 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D697167746A7169756D6A7175727A73656D6F6A6D6863676F69727A6E73647268203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313737313833383236332E373935343439332D3634312D3136353536393531373834343737392F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1771838264.001:58301): pid=455035 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1771838264.003:58302): pid=455035 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838264.242:58303): pid=455035 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1771838264.242:58304): pid=455035 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838264.246:58305): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838264.246:58306): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838264.274:58307): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838264.274:58308): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838264.276:58309): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=455041 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838264.325:58310): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838264.325:58311): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838264.340:58312): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838264.340:58313): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838264.341:58314): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=455054 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838264.371:58315): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838264.371:58316): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838264.386:58317): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838264.386:58318): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838264.387:58319): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=455068 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1771838264.451:58320): pid=455084 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1771838264.451:58321): pid=455084 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6378727566636F71736C6F74766F6C6A796B637A747375636B6C706C696E6775203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313737313833383236332E373935343439332D3634312D3136353536393531373834343737392F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1771838264.452:58322): pid=455084 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1771838264.456:58323): pid=455084 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838264.675:58324): pid=455084 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1771838264.676:58325): pid=455084 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838264.679:58326): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838264.680:58327): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838264.699:58328): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838264.699:58329): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838264.701:58330): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=455087 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838264.728:58331): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838264.728:58332): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838264.800:58333): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838264.800:58334): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838264.801:58335): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=455101 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838264.827:58336): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838264.827:58337): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838264.840:58338): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838264.840:58339): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838264.842:58340): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=455114 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838264.875:58341): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838264.875:58342): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838264.903:58343): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838264.903:58344): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838264.904:58345): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=455133 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838264.948:58346): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838264.948:58347): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838264.963:58348): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838264.963:58349): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838264.964:58350): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=455146 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838264.993:58351): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838264.994:58352): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838265.009:58353): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838265.009:58354): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838265.010:58355): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=455160 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1771838265.067:58356): pid=455176 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1771838265.067:58357): pid=455176 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D736B647467626772646B616A666B66636E79686F716A6763657A6E6A7061706F203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313737313833383236342E383239333031382D3731312D37353933333836383236333833312F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1771838265.068:58358): pid=455176 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1771838265.070:58359): pid=455176 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838265.301:58360): pid=455176 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1771838265.301:58361): pid=455176 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838265.305:58362): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838265.305:58363): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838265.320:58364): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838265.320:58365): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838265.322:58366): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=455180 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838265.352:58367): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838265.352:58368): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838265.611:58369): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838265.611:58370): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838265.613:58371): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=455194 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838265.647:58372): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838265.647:58373): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838265.658:58374): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838265.658:58375): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838265.659:58376): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=455207 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838265.694:58377): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838265.695:58378): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838265.719:58379): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838265.719:58380): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838265.721:58381): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=455226 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838265.769:58382): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838265.769:58383): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838265.783:58384): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838265.783:58385): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838265.784:58386): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=455239 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838265.815:58387): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838265.815:58388): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838265.827:58389): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838265.827:58390): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838265.829:58391): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=455253 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1771838265.895:58392): pid=455269 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1771838265.895:58393): pid=455269 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D656B78616E697071686572776A6968767A63746C7172677064626D6661786370203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313737313833383236352E363438343539322D3733362D3230373539303133383332353338362F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1771838265.896:58394): pid=455269 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1771838265.899:58395): pid=455269 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838266.139:58396): pid=455269 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1771838266.139:58397): pid=455269 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838266.143:58398): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838266.143:58399): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838266.181:58400): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838266.182:58401): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838266.183:58402): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=455275 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838266.232:58403): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838266.232:58404): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838266.245:58405): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838266.245:58406): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838266.247:58407): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=455288 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838266.278:58408): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838266.278:58409): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838266.297:58410): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838266.297:58411): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838266.299:58412): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=455302 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1771838266.339:58413): pid=455318 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1771838266.339:58414): pid=455318 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D70787472646A656E6971777A647062737071636F7A7964686177776367767168203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313737313833383236352E363438343539322D3733362D3230373539303133383332353338362F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1771838266.339:58415): pid=455318 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1771838266.341:58416): pid=455318 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838266.566:58417): pid=455318 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1771838266.566:58418): pid=455318 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838266.569:58419): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838266.569:58420): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838266.584:58421): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838266.584:58422): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838266.585:58423): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=455321 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838266.609:58424): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838266.610:58425): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838266.682:58426): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838266.682:58427): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838266.683:58428): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=455335 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838266.715:58429): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838266.715:58430): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838266.715:58431): pid=455349 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=455349 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771838266.728:58432): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838266.728:58433): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838266.730:58434): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=455350 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838266.768:58435): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838266.768:58436): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838266.807:58437): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838266.808:58438): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838266.809:58439): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=455369 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838266.857:58440): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838266.857:58441): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838266.870:58442): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838266.870:58443): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838266.871:58444): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=455382 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838266.902:58445): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838266.902:58446): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838266.916:58447): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838266.916:58448): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838266.918:58449): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=455396 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=CRYPTO_SESSION msg=audit(1771838266.923:58450): pid=455340 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=455349 suid=74 rport=43072 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771838266.923:58451): pid=455340 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=455349 suid=74 rport=43072 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ACCT msg=audit(1771838266.984:58452): pid=455412 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1771838266.984:58453): pid=455412 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E706A64617865736C7878706871727669686B726A63696A7365756166657172203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313737313833383236362E373139373230362D3737302D3234383832383235323830303837362F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1771838266.985:58454): pid=455412 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1771838266.987:58455): pid=455412 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838267.140:58456): pid=455340 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=455340 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771838267.141:58457): pid=455340 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_END msg=audit(1771838267.227:58458): pid=455412 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1771838267.228:58459): pid=455412 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838267.231:58460): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838267.231:58461): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838267.253:58462): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838267.253:58463): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838267.255:58464): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=455418 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838267.310:58465): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838267.310:58466): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838267.327:58467): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838267.327:58468): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838267.328:58469): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=455431 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838267.357:58470): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838267.357:58471): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838267.372:58472): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838267.373:58473): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838267.374:58474): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=455445 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1771838267.436:58475): pid=455461 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1771838267.437:58476): pid=455461 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D766C67766B777869657672686767666D6F69687764726C73736677767562646C203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313737313833383236362E373139373230362D3737302D3234383832383235323830303837362F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1771838267.438:58477): pid=455461 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1771838267.440:58478): pid=455461 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838267.721:58479): pid=455461 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1771838267.721:58480): pid=455461 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838267.725:58481): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838267.725:58482): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838267.747:58483): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838267.747:58484): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838267.749:58485): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=455464 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838267.780:58486): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838267.780:58487): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838267.852:58488): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838267.852:58489): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838267.882:58490): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=455478 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838267.909:58491): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838267.909:58492): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838267.919:58493): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838267.920:58494): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838267.921:58495): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=455491 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838267.955:58496): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838267.955:58497): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838267.977:58498): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838267.977:58499): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838267.978:58500): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=455510 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838268.050:58501): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838268.050:58502): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838268.066:58503): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838268.066:58504): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838268.067:58505): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=455523 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838268.097:58506): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838268.097:58507): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838268.109:58508): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838268.109:58509): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838268.110:58510): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=455537 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1771838268.179:58511): pid=455553 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1771838268.179:58512): pid=455553 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D716A627164797363686D73696B6C63786D6171636279766D6875717A6670697A203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313737313833383236372E3931313832362D3830362D3235383031393431383034373035352F416E736962616C6C5A5F73797374656D642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1771838268.182:58513): pid=455553 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1771838268.187:58514): pid=455553 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=SERVICE_START msg=audit(1771838268.547:58515): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1771838268.873:58516): prog-id=2272 op=LOAD
type=BPF msg=audit(1771838268.874:58517): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771838268.877:58518): prog-id=2273 op=LOAD
type=BPF msg=audit(1771838268.878:58519): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771838268.878:58520): prog-id=2274 op=LOAD
type=BPF msg=audit(1771838268.878:58521): prog-id=2275 op=LOAD
type=BPF msg=audit(1771838268.878:58522): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771838268.878:58523): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771838268.881:58524): prog-id=2276 op=LOAD
type=BPF msg=audit(1771838268.881:58525): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771838268.882:58526): prog-id=2277 op=LOAD
type=BPF msg=audit(1771838268.882:58527): prog-id=2278 op=LOAD
type=BPF msg=audit(1771838268.882:58528): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771838268.882:58529): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771838268.889:58530): prog-id=2279 op=LOAD
type=BPF msg=audit(1771838268.889:58531): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771838268.891:58532): prog-id=2280 op=LOAD
type=BPF msg=audit(1771838268.891:58533): prog-id=2281 op=LOAD
type=BPF msg=audit(1771838268.891:58534): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771838268.891:58535): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1771838268.900:58536): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1771838268.974:58537): pid=455553 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1771838268.974:58538): pid=455553 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838268.979:58539): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838268.979:58540): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838268.990:58541): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838268.990:58542): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838268.993:58543): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=455626 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838269.025:58544): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838269.025:58545): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838270.739:58546): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838270.739:58547): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838270.740:58548): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=455642 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838270.773:58549): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838270.774:58550): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838270.785:58551): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838270.785:58552): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838270.787:58553): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=455655 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838270.829:58554): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838270.830:58555): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838270.862:58556): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838270.862:58557): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838270.863:58558): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=455674 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838270.914:58559): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838270.914:58560): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838270.927:58561): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838270.927:58562): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838270.929:58563): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=455687 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838270.959:58564): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838270.959:58565): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838270.971:58566): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838270.971:58567): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838270.973:58568): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=455701 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838271.015:58569): pid=455719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=455719 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_ACCT msg=audit(1771838271.043:58570): pid=455718 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1771838271.044:58571): pid=455718 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D68657668616673736A676870616C636F636A6C657072616D73716271736D6C6C203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313737313833383237302E373735373836322D3833302D3138323436373035363038393639352F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1771838271.046:58572): pid=455718 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1771838271.052:58573): pid=455718 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRYPTO_SESSION msg=audit(1771838271.102:58574): pid=455712 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=455719 suid=74 rport=39790 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771838271.102:58575): pid=455712 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=455719 suid=74 rport=39790 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771838271.199:58576): pid=455712 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=455712 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771838271.199:58577): pid=455712 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_END msg=audit(1771838271.278:58578): pid=455718 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1771838271.278:58579): pid=455718 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838271.283:58580): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838271.283:58581): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838271.303:58582): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838271.303:58583): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838271.305:58584): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=455725 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838271.352:58585): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838271.352:58586): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838271.366:58587): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838271.366:58588): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838271.367:58589): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=455738 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838271.396:58590): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838271.396:58591): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838271.411:58592): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838271.411:58593): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838271.412:58594): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=455752 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1771838271.473:58595): pid=455768 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1771838271.474:58596): pid=455768 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D697A637979727A7A6A7272717368757178756F766F6270666C6A7A727578796E203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313737313833383237302E373735373836322D3833302D3138323436373035363038393639352F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1771838271.474:58597): pid=455768 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1771838271.479:58598): pid=455768 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838271.700:58599): pid=455768 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1771838271.700:58600): pid=455768 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838271.704:58601): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838271.704:58602): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838271.716:58603): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838271.716:58604): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838271.718:58605): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=455771 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838271.748:58606): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838271.748:58607): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838272.527:58608): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838272.527:58609): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838272.528:58610): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=455786 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838272.558:58611): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838272.558:58612): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838272.571:58613): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838272.571:58614): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838272.573:58615): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=455799 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838272.608:58616): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838272.608:58617): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838272.644:58618): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838272.644:58619): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838272.646:58620): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=455818 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838272.718:58621): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838272.718:58622): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838272.749:58623): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838272.749:58624): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838272.751:58625): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=455831 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838272.782:58626): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838272.782:58627): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838272.802:58628): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838272.802:58629): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838272.803:58630): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=455845 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1771838272.867:58631): pid=455861 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1771838272.868:58632): pid=455861 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A76646E6966706270776D677074666D7A7972627768706B7476686769627277203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313737313833383237322E353630393031362D3836372D3137373532383035333239343035372F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1771838272.868:58633): pid=455861 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1771838272.923:58634): pid=455861 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=SERVICE_START msg=audit(1771838272.925:58635): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838272.930:58636): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838273.030:58637): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838273.033:58638): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838273.037:58639): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1771838273.178:58640): pid=455861 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1771838273.179:58641): pid=455861 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838273.183:58642): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838273.183:58643): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838273.207:58644): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838273.207:58645): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838273.209:58646): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=455984 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=SERVICE_STOP msg=audit(1771838273.239:58647): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1771838273.253:58648): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838273.253:58649): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838273.265:58650): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838273.265:58651): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838273.266:58652): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=456010 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=SERVICE_STOP msg=audit(1771838273.266:58653): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1771838273.287:58654): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838273.287:58655): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838273.305:58656): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838273.305:58657): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838273.309:58658): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=456028 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=SERVICE_STOP msg=audit(1771838273.310:58659): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838273.335:58660): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1771838273.354:58661): pid=456045 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1771838273.354:58662): pid=456045 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7978776F66796A7367666B6D6362616C74756B796B6863766A727965616F7065203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313737313833383237322E353630393031362D3836372D3137373532383035333239343035372F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1771838273.356:58663): pid=456045 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1771838273.361:58664): pid=456045 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=SERVICE_STOP msg=audit(1771838273.411:58665): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1771838273.551:58666): pid=456045 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1771838273.551:58667): pid=456045 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838273.556:58668): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838273.556:58669): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838273.568:58670): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838273.568:58671): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838273.570:58672): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=456051 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838273.602:58673): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838273.602:58674): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838273.680:58675): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838273.680:58676): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838273.682:58677): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=456065 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838273.725:58678): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838273.725:58679): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838273.747:58680): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838273.747:58681): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838273.748:58682): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=456078 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838273.793:58683): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838273.793:58684): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838273.824:58685): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838273.824:58686): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838273.825:58687): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=456097 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838273.887:58688): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838273.887:58689): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838273.904:58690): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838273.904:58691): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838273.906:58692): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=456110 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838273.940:58693): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838273.940:58694): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838273.951:58695): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838273.951:58696): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838273.953:58697): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=456124 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1771838274.022:58698): pid=456140 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1771838274.023:58699): pid=456140 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D776A6B6E6B676D626F6167796A70726E71666C6D786F7971736274727A657173203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313737313833383237332E373336313133332D3930322D3137333531323931323035343830382F416E736962616C6C5A5F73797374656D642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1771838274.023:58700): pid=456140 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1771838274.027:58701): pid=456140 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=BPF msg=audit(1771838274.665:58702): prog-id=2282 op=LOAD
type=BPF msg=audit(1771838274.666:58703): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771838274.669:58704): prog-id=2283 op=LOAD
type=BPF msg=audit(1771838274.669:58705): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771838274.669:58706): prog-id=2284 op=LOAD
type=BPF msg=audit(1771838274.670:58707): prog-id=2285 op=LOAD
type=BPF msg=audit(1771838274.670:58708): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771838274.670:58709): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771838274.673:58710): prog-id=2286 op=LOAD
type=BPF msg=audit(1771838274.673:58711): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771838274.673:58712): prog-id=2287 op=LOAD
type=BPF msg=audit(1771838274.673:58713): prog-id=2288 op=LOAD
type=BPF msg=audit(1771838274.673:58714): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771838274.673:58715): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771838274.681:58716): prog-id=2289 op=LOAD
type=BPF msg=audit(1771838274.681:58717): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771838274.683:58718): prog-id=2290 op=LOAD
type=BPF msg=audit(1771838274.683:58719): prog-id=2291 op=LOAD
type=BPF msg=audit(1771838274.683:58720): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771838274.683:58721): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1771838274.782:58722): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=netns-placeholder comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838274.782:58723): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=netns-placeholder comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1771838274.841:58724): pid=456140 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1771838274.842:58725): pid=456140 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838274.848:58726): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838274.848:58727): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838274.862:58728): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838274.862:58729): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838274.863:58730): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=456187 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838274.898:58731): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838274.898:58732): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838275.028:58733): pid=456201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=456201 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771838275.030:58734): pid=456181 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=456201 suid=74 rport=55666 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.38.97 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771838275.030:58735): pid=456181 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=456201 suid=74 rport=55666 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.38.97 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771838275.278:58736): pid=456181 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=456181 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771838275.278:58737): pid=456181 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=209.38.38.97 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1771838275.925:58738): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838275.925:58739): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838275.926:58740): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=456203 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838275.960:58741): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838275.960:58742): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838275.975:58743): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838275.975:58744): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838275.977:58745): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=456216 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838276.013:58746): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838276.013:58747): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838276.034:58748): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838276.034:58749): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838276.035:58750): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=456235 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838276.082:58751): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838276.083:58752): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838276.099:58753): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838276.100:58754): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838276.101:58755): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=456248 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838276.134:58756): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838276.134:58757): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838276.144:58758): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838276.144:58759): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838276.146:58760): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=456262 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1771838276.215:58761): pid=456278 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1771838276.215:58762): pid=456278 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D727679627871776D706C796F786565777977786473727A63736173666F78616B203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313737313833383237352E3936343835352D3933322D36323735383533373530323337312F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1771838276.216:58763): pid=456278 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1771838276.223:58764): pid=456278 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838276.500:58765): pid=456278 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1771838276.501:58766): pid=456278 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838276.505:58767): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838276.505:58768): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838276.517:58769): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838276.518:58770): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838276.519:58771): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=456282 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838276.548:58772): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838276.548:58773): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838276.617:58774): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838276.618:58775): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838276.619:58776): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=456296 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838276.650:58777): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838276.650:58778): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838276.663:58779): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838276.664:58780): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838276.665:58781): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=456309 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838276.702:58782): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838276.702:58783): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838276.735:58784): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838276.735:58785): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838276.736:58786): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=456328 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838276.789:58787): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838276.789:58788): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838276.803:58789): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838276.803:58790): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838276.805:58791): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=456341 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838276.839:58792): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838276.840:58793): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838276.853:58794): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838276.854:58795): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838276.856:58796): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=456355 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1771838276.922:58797): pid=456371 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1771838276.923:58798): pid=456371 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D746664717365647170716373766D6E69757875677867676573716F767A757276203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313737313833383237362E363532363638372D3935362D3237313436353238303938343236362F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1771838276.923:58799): pid=456371 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1771838276.926:58800): pid=456371 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838277.130:58801): pid=456371 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1771838277.130:58802): pid=456371 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838277.134:58803): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838277.134:58804): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838277.160:58805): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838277.160:58806): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838277.162:58807): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=456374 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838277.202:58808): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838277.202:58809): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838277.222:58810): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838277.222:58811): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838277.223:58812): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=456388 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838277.255:58813): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838277.255:58814): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838277.282:58815): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838277.282:58816): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838277.284:58817): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=456402 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838277.325:58818): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838277.325:58819): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838277.339:58820): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838277.340:58821): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838277.341:58822): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=456415 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838277.372:58823): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838277.372:58824): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838277.384:58825): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838277.384:58826): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838277.385:58827): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=456429 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1771838277.447:58828): pid=456445 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1771838277.447:58829): pid=456445 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D79736665716E6C65647377776E6B6E6661706E7162636866786F726762786276203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313737313833383237362E363532363638372D3935362D3237313436353238303938343236362F416E736962616C6C5A5F636F70792E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1771838277.448:58830): pid=456445 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1771838277.450:58831): pid=456445 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838277.677:58832): pid=456445 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1771838277.678:58833): pid=456445 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838277.681:58834): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838277.681:58835): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838277.735:58836): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838277.735:58837): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838277.736:58838): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=456448 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838277.768:58839): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838277.768:58840): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838278.065:58841): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838278.065:58842): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838278.066:58843): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=456462 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838278.098:58844): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838278.098:58845): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838278.107:58846): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838278.107:58847): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838278.109:58848): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=456475 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838278.148:58849): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838278.148:58850): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838278.176:58851): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838278.176:58852): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838278.178:58853): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=456494 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838278.237:58854): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838278.237:58855): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838278.252:58856): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838278.252:58857): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838278.252:58858): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=456508 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838278.287:58859): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838278.287:58860): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838278.300:58861): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838278.300:58862): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838278.302:58863): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=456522 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1771838278.367:58864): pid=456538 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1771838278.367:58865): pid=456538 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A76626A786F7675727A757867746567786C757364756A6E7A6D787677636E71203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313737313833383237382E303939373930362D313030372D35393837343130323638333032322F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1771838278.369:58866): pid=456538 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1771838278.370:58867): pid=456538 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838278.595:58868): pid=456538 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1771838278.595:58869): pid=456538 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838278.599:58870): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838278.599:58871): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838278.619:58872): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838278.619:58873): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838278.620:58874): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=456541 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838278.647:58875): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838278.647:58876): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838278.718:58877): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838278.718:58878): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838278.720:58879): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=456555 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838278.749:58880): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838278.749:58881): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838278.759:58882): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838278.761:58883): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838278.762:58884): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=456568 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838278.798:58885): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838278.799:58886): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838278.817:58887): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838278.817:58888): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838278.819:58889): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=456587 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838278.866:58890): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838278.866:58891): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838278.878:58892): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838278.878:58893): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838278.880:58894): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=456600 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838278.911:58895): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838278.911:58896): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838278.924:58897): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838278.924:58898): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838278.926:58899): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=456614 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1771838278.990:58900): pid=456630 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1771838278.991:58901): pid=456630 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6571646C6D73787A616B696F7079746F797862736A6D6E71646E6278746B6961203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313737313833383237382E373531353030342D313033322D35303531383433353939383030372F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1771838278.991:58902): pid=456630 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1771838278.994:58903): pid=456630 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838279.277:58904): pid=456630 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1771838279.278:58905): pid=456630 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838279.281:58906): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838279.281:58907): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838279.295:58908): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838279.295:58909): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838279.296:58910): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=456634 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838279.325:58911): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838279.325:58912): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838279.419:58913): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838279.419:58914): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838279.421:58915): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=456648 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838279.450:58916): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838279.450:58917): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838279.480:58918): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838279.480:58919): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838279.482:58920): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=456661 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838279.514:58921): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838279.514:58922): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838279.545:58923): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838279.545:58924): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838279.547:58925): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=456680 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838279.615:58926): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838279.615:58927): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838279.615:58928): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838279.615:58929): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838279.616:58930): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=456693 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838279.643:58931): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838279.643:58932): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838279.654:58933): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838279.655:58934): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838279.656:58935): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=456707 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1771838279.713:58936): pid=456723 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1771838279.713:58937): pid=456723 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D647A7968787267706568646C7A646777636A6F716E77636571787870777A6165203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313737313833383237392E34353535342D313035352D3230303938313233353536313735312F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1771838279.714:58938): pid=456723 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1771838279.716:58939): pid=456723 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838279.920:58940): pid=456723 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1771838279.921:58941): pid=456723 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838279.924:58942): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838279.924:58943): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838279.940:58944): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838279.940:58945): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838279.942:58946): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=456726 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838279.975:58947): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838279.975:58948): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838279.988:58949): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838279.988:58950): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838279.989:58951): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=456739 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838280.018:58952): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838280.018:58953): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838280.039:58954): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838280.039:58955): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838280.040:58956): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=456753 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838280.085:58957): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838280.085:58958): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838280.096:58959): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838280.096:58960): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838280.098:58961): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=456766 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838280.127:58962): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838280.127:58963): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838280.137:58964): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838280.137:58965): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838280.139:58966): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=456780 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1771838280.197:58967): pid=456796 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1771838280.197:58968): pid=456796 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D757A6E746664727477696D7A6D657468676564647969686D65796477766A7274203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313737313833383237392E34353535342D313035352D3230303938313233353536313735312F416E736962616C6C5A5F636F70792E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1771838280.197:58969): pid=456796 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1771838280.200:58970): pid=456796 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838280.555:58971): pid=456796 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1771838280.555:58972): pid=456796 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838280.559:58973): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838280.559:58974): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838281.019:58975): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838281.019:58976): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838281.020:58977): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=456800 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838281.051:58978): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838281.051:58979): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838281.365:58980): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838281.365:58981): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838281.367:58982): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=456815 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838281.396:58983): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838281.396:58984): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838281.410:58985): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838281.410:58986): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838281.412:58987): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=456828 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838281.447:58988): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838281.447:58989): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838281.468:58990): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838281.468:58991): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838281.470:58992): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=456847 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838281.514:58993): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838281.514:58994): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838281.526:58995): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838281.526:58996): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838281.528:58997): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=456860 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838281.558:58998): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838281.558:58999): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838281.570:59000): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838281.570:59001): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838281.572:59002): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=456874 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838281.827:59003): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838281.827:59004): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838281.840:59005): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838281.840:59006): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838281.841:59007): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=456891 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838281.883:59008): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838281.883:59009): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838282.215:59010): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838282.215:59011): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838282.216:59012): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=456906 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838282.247:59013): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838282.247:59014): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838282.258:59015): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838282.258:59016): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838282.259:59017): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=456919 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838282.291:59018): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838282.291:59019): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838282.335:59020): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838282.335:59021): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838282.337:59022): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=456938 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838282.381:59023): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838282.381:59024): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838282.400:59025): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838282.400:59026): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838282.401:59027): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=456951 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838282.427:59028): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838282.427:59029): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838282.442:59030): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838282.442:59031): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838282.443:59032): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=456965 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838282.665:59033): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838282.665:59034): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838283.444:59035): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838283.444:59036): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838283.445:59037): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=456983 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838283.494:59038): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838283.494:59039): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838283.513:59040): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838283.513:59041): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838283.514:59042): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=456996 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838283.541:59043): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838283.541:59044): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838283.568:59045): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838283.568:59046): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838283.569:59047): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=457010 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838283.618:59048): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838283.618:59049): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838283.631:59050): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838283.631:59051): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838283.633:59052): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=457023 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838283.666:59053): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838283.666:59054): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838283.679:59055): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838283.679:59056): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838283.681:59057): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=457037 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838283.906:59058): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838283.906:59059): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838283.922:59060): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838283.922:59061): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838283.924:59062): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=457054 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838283.952:59063): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838283.953:59064): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838284.277:59065): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838284.277:59066): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838284.279:59067): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=457069 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838284.308:59068): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838284.308:59069): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838284.321:59070): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838284.321:59071): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838284.322:59072): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=457082 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838284.359:59073): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838284.359:59074): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838284.485:59075): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838284.485:59076): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838284.487:59077): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=457101 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838284.541:59078): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838284.541:59079): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838284.555:59080): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838284.555:59081): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838284.556:59082): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=457114 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838284.589:59083): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838284.589:59084): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838284.599:59085): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838284.600:59086): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838284.601:59087): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=457128 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1771838284.704:59088): pid=457144 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1771838284.704:59089): pid=457144 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7261716B79686E69676F6E6C626A6D6E6873797075726C63767173636D637A61203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313737313833383238342E333130323337362D313137352D3130353032363234333532393537332F416E736962616C6C5A5F636F6E7461696E65725F636F6E6669675F646174612E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1771838284.705:59090): pid=457144 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1771838284.708:59091): pid=457144 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838284.900:59092): pid=457144 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1771838284.901:59093): pid=457144 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838284.905:59094): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838284.905:59095): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838284.921:59096): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838284.921:59097): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838284.923:59098): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=457147 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838284.950:59099): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838284.950:59100): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838285.252:59101): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838285.252:59102): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838285.254:59103): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=457162 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838285.287:59104): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838285.288:59105): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838285.298:59106): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838285.298:59107): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838285.300:59108): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=457175 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838285.338:59109): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838285.338:59110): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838285.468:59111): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838285.468:59112): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838285.470:59113): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=457194 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838285.525:59114): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838285.525:59115): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838285.540:59116): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838285.540:59117): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838285.542:59118): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=457207 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838285.573:59119): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838285.574:59120): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838285.585:59121): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838285.586:59122): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838285.587:59123): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=457221 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1771838285.654:59124): pid=457237 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1771838285.654:59125): pid=457237 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B6B6661666B6D6162767A6A74766A6E7371696A686B6669706C6B6B6F69696A203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313737313833383238352E323839353139332D313230382D3235383735323431353833393536302F416E736962616C6C5A5F636F6E7461696E65725F636F6E6669675F686173682E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1771838285.655:59126): pid=457237 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1771838285.657:59127): pid=457237 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838285.922:59128): pid=457237 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1771838285.923:59129): pid=457237 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838285.927:59130): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838285.927:59131): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838285.943:59132): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838285.943:59133): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838285.944:59134): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=457240 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838285.976:59135): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838285.976:59136): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838286.234:59137): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838286.234:59138): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838286.235:59139): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=457255 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838286.268:59140): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838286.268:59141): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838286.279:59142): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838286.279:59143): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838286.281:59144): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=457268 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838286.318:59145): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838286.318:59146): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838286.565:59147): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838286.565:59148): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838286.567:59149): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=457287 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838286.635:59150): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838286.635:59151): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838286.648:59152): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838286.648:59153): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838286.649:59154): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=457300 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838286.683:59155): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838286.683:59156): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838286.694:59157): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838286.694:59158): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838286.695:59159): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=457314 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1771838286.763:59160): pid=457330 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1771838286.763:59161): pid=457330 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7462677A636B6D78757A766A7A756E63746D777A736565796675796663777871203B202F7573722F62696E2F707974686F6E33202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313737313833383238362E323730353537342D313233382D38383732363632353334373333362F416E736962616C6C5A5F6564706D5F636F6E7461696E65725F6D616E6167652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1771838286.763:59162): pid=457330 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1771838286.766:59163): pid=457330 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838287.536:59164): pid=457330 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1771838287.536:59165): pid=457330 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838287.540:59166): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838287.540:59167): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838287.673:59168): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838287.673:59169): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838287.674:59170): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=457410 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838287.707:59171): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838287.707:59172): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838287.800:59173): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838287.800:59174): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838287.801:59175): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=457424 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838287.831:59176): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838287.831:59177): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838287.848:59178): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838287.848:59179): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838287.850:59180): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=457437 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838287.888:59181): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838287.888:59182): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838287.919:59183): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838287.919:59184): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838287.921:59185): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=457456 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838287.967:59186): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838287.967:59187): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838287.988:59188): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838287.988:59189): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838287.990:59190): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=457469 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838288.018:59191): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838288.018:59192): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838288.031:59193): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838288.031:59194): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838288.033:59195): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=457483 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1771838288.099:59196): pid=457499 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1771838288.100:59197): pid=457499 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D656C7267636D67716869656F736A6E626A776369726A6C626873676769756761203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313737313833383238372E383333373631372D313236322D3234383235313130303231333332372F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1771838288.100:59198): pid=457499 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1771838288.103:59199): pid=457499 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838288.357:59200): pid=457499 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1771838288.357:59201): pid=457499 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838288.360:59202): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838288.360:59203): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838288.382:59204): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838288.383:59205): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838288.384:59206): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=457505 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838288.410:59207): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838288.410:59208): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838288.991:59209): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771838288.991:59210): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771838289.047:59211): pid=457519 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771838289.047:59212): pid=457519 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771838289.048:59213): pid=457519 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771838289.051:59214): pid=457519 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771838289.052:59215): pid=457519 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771838289.053:59216): pid=457519 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771838289.058:59217): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771838289.058:59218): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771838289.081:59219): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771838289.081:59220): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771838289.141:59221): pid=457534 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771838289.142:59222): pid=457534 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6365706861646D2E64343332396666306235383338396131633837343432376536666138636461646332353435303739313137633737343464643965646634613365346663383366202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771838289.142:59223): pid=457534 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771838289.145:59224): pid=457534 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_LOGIN msg=audit(1771838289.155:59225): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838289.155:59226): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838289.157:59227): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=457549 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838289.189:59228): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838289.189:59229): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838289.206:59230): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838289.206:59231): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838289.207:59232): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=457562 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838289.244:59233): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838289.245:59234): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838289.270:59235): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838289.270:59236): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838289.271:59237): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=457582 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838289.317:59238): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838289.317:59239): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838289.333:59240): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838289.333:59241): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838289.335:59242): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=457595 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838289.365:59243): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838289.365:59244): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838289.378:59245): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838289.379:59246): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838289.380:59247): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=457609 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1771838289.442:59248): pid=457625 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1771838289.442:59249): pid=457625 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A6F786B736673757078746C64776D7577796D78737262786E677A747A6D6878203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313737313833383238392E313931363738382D313238392D3234373533373132383332373432342F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1771838289.443:59250): pid=457625 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1771838289.445:59251): pid=457625 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838289.654:59252): pid=457625 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1771838289.655:59253): pid=457625 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838289.659:59254): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838289.659:59255): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838289.702:59256): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838289.702:59257): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838289.703:59258): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=457649 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838289.740:59259): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838289.740:59260): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838289.758:59261): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838289.758:59262): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838289.759:59263): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=457674 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838289.786:59264): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838289.786:59265): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1771838289.801:59266): pid=457534 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771838289.801:59267): pid=457534 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_LOGIN msg=audit(1771838289.803:59268): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838289.803:59269): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838289.804:59270): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=457688 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1771838289.859:59271): pid=457704 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1771838289.859:59272): pid=457704 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D66726F776F6A6A696D766661616A78627177726A666E74796F76766B74756F6A203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313737313833383238392E313931363738382D313238392D3234373533373132383332373432342F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1771838289.860:59273): pid=457704 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1771838289.864:59274): pid=457704 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838289.930:59275): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771838289.931:59276): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_END msg=audit(1771838290.058:59277): pid=457704 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1771838290.058:59278): pid=457704 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838290.066:59279): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838290.066:59280): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838290.098:59281): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838290.099:59282): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838290.100:59283): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=457707 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838290.129:59284): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838290.129:59285): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838290.145:59286): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838290.146:59287): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838290.147:59288): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=457720 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838290.178:59289): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838290.179:59290): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838290.203:59291): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771838290.203:59292): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771838290.261:59293): pid=457739 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771838290.261:59294): pid=457739 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771838290.262:59295): pid=457739 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771838290.279:59296): pid=457739 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771838290.282:59297): pid=457739 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771838290.283:59298): pid=457739 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=SERVICE_START msg=audit(1771838290.284:59299): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1771838290.286:59300): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771838290.286:59301): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771838290.334:59302): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838290.334:59303): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838290.336:59304): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=457766 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838290.413:59305): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838290.413:59306): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838290.434:59307): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838290.434:59308): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838290.435:59309): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=457791 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=SERVICE_STOP msg=audit(1771838290.458:59310): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1771838290.491:59311): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838290.491:59312): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838290.523:59313): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838290.523:59314): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838290.524:59315): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=457804 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838290.558:59316): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838290.558:59317): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838290.573:59318): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838290.573:59319): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838290.575:59320): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=457818 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1771838290.639:59321): pid=457834 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1771838290.639:59322): pid=457834 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D70727364686F666A79736C7168616D7072676A6E6A6E7877776D64667975616E203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313737313833383239302E313330363232342D313238392D3235373439383130373530353937372F416E736962616C6C5A5F636F70792E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1771838290.641:59323): pid=457834 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1771838290.645:59324): pid=457834 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838290.868:59325): pid=457834 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1771838290.869:59326): pid=457834 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838290.873:59327): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838290.873:59328): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838290.896:59329): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838290.896:59330): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838290.898:59331): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=457837 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838290.971:59332): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838290.971:59333): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838291.003:59334): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838291.003:59335): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838291.005:59336): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=457850 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838291.043:59337): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838291.043:59338): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838291.062:59339): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838291.063:59340): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838291.065:59341): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=457864 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1771838291.120:59342): pid=457880 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1771838291.120:59343): pid=457880 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D61717A6E77636677697073716F666A616C7361756B6B7571656B6C757A6B62203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313737313833383239302E313330363232342D313238392D3235373439383130373530353937372F416E736962616C6C5A5F73797374656D642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1771838291.122:59344): pid=457880 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1771838291.124:59345): pid=457880 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=BPF msg=audit(1771838291.815:59346): prog-id=2292 op=LOAD
type=BPF msg=audit(1771838291.815:59347): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771838291.818:59348): prog-id=2293 op=LOAD
type=BPF msg=audit(1771838291.818:59349): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771838291.818:59350): prog-id=2294 op=LOAD
type=BPF msg=audit(1771838291.819:59351): prog-id=2295 op=LOAD
type=BPF msg=audit(1771838291.819:59352): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771838291.819:59353): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771838291.822:59354): prog-id=2296 op=LOAD
type=BPF msg=audit(1771838291.822:59355): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771838291.822:59356): prog-id=2297 op=LOAD
type=BPF msg=audit(1771838291.822:59357): prog-id=2298 op=LOAD
type=BPF msg=audit(1771838291.822:59358): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771838291.822:59359): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771838291.830:59360): prog-id=2299 op=LOAD
type=BPF msg=audit(1771838291.830:59361): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771838291.832:59362): prog-id=2300 op=LOAD
type=BPF msg=audit(1771838291.832:59363): prog-id=2301 op=LOAD
type=BPF msg=audit(1771838291.832:59364): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771838291.832:59365): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1771838291.880:59366): pid=457880 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1771838291.880:59367): pid=457880 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838291.886:59368): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838291.886:59369): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838292.036:59370): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838292.036:59371): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838292.039:59372): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=457920 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838292.103:59373): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838292.104:59374): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838292.116:59375): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838292.116:59376): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838292.118:59377): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=457933 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838292.153:59378): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838292.153:59379): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838292.167:59380): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838292.168:59381): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838292.170:59382): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=457947 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1771838292.241:59383): pid=457963 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1771838292.242:59384): pid=457963 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D64616F6365646863766C736970696975716379636672716C7273766B7A737174203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313737313833383239302E313330363232342D313238392D3235373439383130373530353937372F416E736962616C6C5A5F73797374656D642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1771838292.243:59385): pid=457963 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1771838292.250:59386): pid=457963 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=BPF msg=audit(1771838292.958:59387): prog-id=2302 op=LOAD
type=BPF msg=audit(1771838292.958:59388): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771838292.962:59389): prog-id=2303 op=LOAD
type=BPF msg=audit(1771838292.962:59390): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771838292.962:59391): prog-id=2304 op=LOAD
type=BPF msg=audit(1771838292.962:59392): prog-id=2305 op=LOAD
type=BPF msg=audit(1771838292.962:59393): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771838292.962:59394): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771838292.966:59395): prog-id=2306 op=LOAD
type=BPF msg=audit(1771838292.966:59396): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771838292.966:59397): prog-id=2307 op=LOAD
type=BPF msg=audit(1771838292.966:59398): prog-id=2308 op=LOAD
type=BPF msg=audit(1771838292.966:59399): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771838292.966:59400): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771838292.975:59401): prog-id=2309 op=LOAD
type=BPF msg=audit(1771838292.975:59402): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771838292.977:59403): prog-id=2310 op=LOAD
type=BPF msg=audit(1771838292.977:59404): prog-id=2311 op=LOAD
type=BPF msg=audit(1771838292.977:59405): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771838292.977:59406): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771838293.190:59407): prog-id=2312 op=LOAD
type=SYSCALL msg=audit(1771838293.190:59407): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7fffa33c3800 a2=90 a3=9500000001 items=0 ppid=458020 pid=458021 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1771838293.190:59407): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F333363643130373237616133653563656237393238363939333063373836
type=USER_ACCT msg=audit(1771838293.248:59408): pid=458026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_CMD msg=audit(1771838293.248:59409): pid=458026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd="kolla_set_configs" exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="unset"
type=CRED_REFR msg=audit(1771838293.249:59410): pid=458026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838293.249:59411): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1771838293.251:59412): pid=458026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1771838293.301:59413): pid=458026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1771838293.301:59414): pid=458026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1771838293.319:59415): pid=458055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_CMD msg=audit(1771838293.319:59416): pid=458055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd="kolla_copy_cacerts" exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="unset"
type=CRED_REFR msg=audit(1771838293.320:59417): pid=458055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1771838293.322:59418): pid=458055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1771838293.325:59419): pid=458055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1771838293.326:59420): pid=458055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838293.361:59421): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1771838293.796:59422): prog-id=2313 op=LOAD
type=BPF msg=audit(1771838293.796:59423): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771838293.799:59424): prog-id=2314 op=LOAD
type=BPF msg=audit(1771838293.799:59425): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771838293.800:59426): prog-id=2315 op=LOAD
type=BPF msg=audit(1771838293.800:59427): prog-id=2316 op=LOAD
type=BPF msg=audit(1771838293.800:59428): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771838293.800:59429): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771838293.803:59430): prog-id=2317 op=LOAD
type=BPF msg=audit(1771838293.803:59431): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771838293.803:59432): prog-id=2318 op=LOAD
type=BPF msg=audit(1771838293.803:59433): prog-id=2319 op=LOAD
type=BPF msg=audit(1771838293.803:59434): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771838293.803:59435): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771838293.811:59436): prog-id=2320 op=LOAD
type=BPF msg=audit(1771838293.811:59437): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771838293.813:59438): prog-id=2321 op=LOAD
type=BPF msg=audit(1771838293.813:59439): prog-id=2322 op=LOAD
type=BPF msg=audit(1771838293.813:59440): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771838293.813:59441): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1771838293.824:59442): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=edpm_ovn_metadata_agent comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1771838293.874:59443): pid=457963 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1771838293.875:59444): pid=457963 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838293.885:59445): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838293.885:59446): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838293.900:59447): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838293.900:59448): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838293.901:59449): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=458111 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838293.932:59450): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838293.932:59451): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838294.808:59452): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838294.808:59453): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838294.810:59454): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=458126 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838294.841:59455): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838294.841:59456): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838294.856:59457): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838294.857:59458): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838294.858:59459): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=458139 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838294.895:59460): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838294.895:59461): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838295.061:59462): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838295.061:59463): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838295.063:59464): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=458158 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838295.123:59465): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838295.123:59466): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1771838295.124:59467): pid=458172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_CMD msg=audit(1771838295.125:59468): pid=458172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E6620707269767365702D68656C706572202D2D636F6E6669672D66696C65202F6574632F6E657574726F6E2F6E657574726F6E2E636F6E66202D2D636F6E6669672D646972202F6574632F6E657574726F6E2E636F6E662E64202D2D707269767365705F636F6E74657874206E657574726F6E2E70726976696C656765642E6E616D6573706163655F636D64202D2D707269767365705F736F636B5F70617468202F746D702F746D706464346E77676E702F707269767365702E736F636B exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="unset"
type=CRED_REFR msg=audit(1771838295.125:59469): pid=458172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1771838295.127:59470): pid=458172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1771838295.144:59471): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838295.144:59472): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838295.145:59473): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=458175 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838295.178:59474): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838295.178:59475): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838295.197:59476): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838295.197:59477): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838295.199:59478): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=458189 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838295.445:59479): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838295.445:59480): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838295.468:59481): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838295.468:59482): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838295.470:59483): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=458208 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838295.497:59484): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838295.497:59485): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1771838295.734:59486): pid=458172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1771838295.734:59487): pid=458172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1771838296.225:59488): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838296.225:59489): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838296.227:59490): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=458227 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838296.248:59491): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838296.248:59492): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838296.262:59493): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838296.262:59494): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838296.263:59495): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=458241 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838296.293:59496): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838296.293:59497): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838296.319:59498): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838296.319:59499): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838296.321:59500): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=458260 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838296.375:59501): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838296.375:59502): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838296.392:59503): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838296.392:59504): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838296.393:59505): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=458276 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838296.419:59506): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838296.419:59507): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838296.438:59508): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838296.438:59509): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838296.439:59510): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=458290 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1771838296.493:59511): pid=458306 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1771838296.493:59512): pid=458306 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D627570667377696173716F707769656B68776A6966626C656663747776666668203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313737313833383239362E323531303736352D313432342D3235363732363039303237363233312F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1771838296.494:59513): pid=458306 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1771838296.500:59514): pid=458306 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838296.725:59515): pid=458306 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1771838296.725:59516): pid=458306 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838296.729:59517): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838296.730:59518): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838296.758:59519): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838296.758:59520): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838296.759:59521): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=458311 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838296.788:59522): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838296.788:59523): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838296.803:59524): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838296.803:59525): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838296.805:59526): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=458324 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838296.827:59527): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838296.827:59528): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838296.859:59529): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838296.859:59530): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838296.861:59531): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=458338 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838296.904:59532): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838296.904:59533): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838296.914:59534): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838296.914:59535): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838296.915:59536): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=458351 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838296.943:59537): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838296.943:59538): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838296.954:59539): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838296.954:59540): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838296.955:59541): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=458365 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1771838297.020:59542): pid=458381 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1771838297.020:59543): pid=458381 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D667A776C6562647672707762716C7167777A61756A616D6F716F6D6166757A6F203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313737313833383239362E323531303736352D313432342D3235363732363039303237363233312F416E736962616C6C5A5F636F70792E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1771838297.021:59544): pid=458381 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1771838297.024:59545): pid=458381 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838297.240:59546): pid=458381 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1771838297.240:59547): pid=458381 uid=1000 auid=1000 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771838297.244:59548): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838297.244:59549): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1771838297.258:59550): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771838297.258:59551): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838297.260:59552): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=458385 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838297.293:59553): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771838297.293:59554): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838297.766:59555): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=452451 suid=1000 rport=43294 laddr=192.168.122.105 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838297.766:59556): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=452451 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771838297.769:59557): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=192.168.122.30 addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_DISP msg=audit(1771838297.770:59558): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=192.168.122.30 addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771838297.771:59559): pid=452448 uid=0 auid=1000 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=452448 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="root"
type=SERVICE_START msg=audit(1771838299.028:59560): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838299.297:59561): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838304.025:59562): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838304.028:59563): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838304.032:59564): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838304.037:59565): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838304.041:59566): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838304.494:59567): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838304.514:59568): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838304.548:59569): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838304.600:59570): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838304.657:59571): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771838305.891:59572): pid=458587 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=458587 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771838305.978:59573): pid=458586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=458587 suid=74 rport=56432 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771838305.979:59574): pid=458586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=458587 suid=74 rport=56432 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771838306.067:59575): pid=458586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=458586 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771838306.067:59576): pid=458586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771838306.434:59577): pid=458590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=458590 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771838306.641:59578): pid=458589 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=458590 suid=74 rport=59068 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771838306.641:59579): pid=458589 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=458590 suid=74 rport=59068 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771838306.857:59580): pid=458589 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=458589 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771838306.857:59581): pid=458589 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838308.030:59582): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838321.026:59583): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838321.186:59584): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838324.028:59585): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771838324.099:59586): pid=458678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=458678 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=SERVICE_STOP msg=audit(1771838324.167:59587): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1771838324.312:59588): pid=458666 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=458678 suid=74 rport=50604 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.38.97 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771838324.312:59589): pid=458666 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=458678 suid=74 rport=50604 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.38.97 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771838324.321:59590): pid=458666 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=458666 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771838324.321:59591): pid=458666 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=209.38.38.97 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771838329.919:59592): pid=458695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=458695 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771838330.005:59593): pid=458694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=458695 suid=74 rport=54980 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771838330.005:59594): pid=458694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=458695 suid=74 rport=54980 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1771838330.029:59595): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771838330.101:59596): pid=458694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=458694 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771838330.102:59597): pid=458694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838330.245:59598): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838335.034:59599): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838335.038:59600): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838335.041:59601): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838335.045:59602): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838335.050:59603): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838335.458:59604): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838335.465:59605): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838335.644:59606): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838335.733:59607): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838335.823:59608): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771838341.692:59609): pid=458881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=458881 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771838341.852:59610): pid=458880 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=458881 suid=74 rport=44732 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=80.94.92.182 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771838341.852:59611): pid=458880 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=458881 suid=74 rport=44732 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=80.94.92.182 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771838342.476:59612): pid=458880 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=458881 suid=74 rport=44732 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=80.94.92.182 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771838342.476:59613): pid=458880 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=458881 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1771838342.477:59614): pid=458880 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=80.94.92.182 addr=80.94.92.182 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771838342.478:59615): pid=458880 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=458880 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771838342.478:59616): pid=458880 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=80.94.92.182 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771838346.388:59617): pid=458887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=458887 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771838346.521:59618): pid=458886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=458887 suid=74 rport=48310 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771838346.521:59619): pid=458886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=458887 suid=74 rport=48310 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771838346.735:59620): pid=458886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=458886 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771838346.735:59621): pid=458886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1771838350.523:59622): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771838350.523:59623): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771838350.591:59624): pid=458893 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771838350.592:59625): pid=458893 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771838350.593:59626): pid=458893 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771838350.599:59627): pid=458893 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771838350.601:59628): pid=458893 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771838350.602:59629): pid=458893 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771838350.607:59630): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771838350.607:59631): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771838350.622:59632): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771838350.622:59633): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771838350.672:59634): pid=458908 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771838350.672:59635): pid=458908 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6365706861646D2E64343332396666306235383338396131633837343432376536666138636461646332353435303739313137633737343464643965646634613365346663383366202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771838350.672:59636): pid=458908 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771838350.675:59637): pid=458908 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771838351.362:59638): pid=458908 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771838351.363:59639): pid=458908 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771838351.615:59640): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771838351.616:59641): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771838351.886:59642): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771838351.886:59643): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771838351.924:59644): pid=458955 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771838351.924:59645): pid=458955 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771838351.925:59646): pid=458955 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771838351.935:59647): pid=458955 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=SERVICE_START msg=audit(1771838351.937:59648): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1771838351.938:59649): pid=458955 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771838351.938:59650): pid=458955 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771838351.942:59651): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771838351.942:59652): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_STOP msg=audit(1771838352.149:59653): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838355.026:59654): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838355.140:59655): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771838360.056:59656): pid=459026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=459026 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771838360.058:59657): pid=459025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=459026 suid=74 rport=60750 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771838360.058:59658): pid=459025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=459026 suid=74 rport=60750 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771838360.226:59659): pid=459025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=459025 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771838360.226:59660): pid=459025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838361.030:59661): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838361.226:59662): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838366.025:59663): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838366.028:59664): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838366.032:59665): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838366.035:59666): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838366.039:59667): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838366.346:59668): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838366.363:59669): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838366.365:59670): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838366.422:59671): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838366.455:59672): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771838372.631:59673): pid=459217 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=459217 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771838372.634:59674): pid=459215 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=459217 suid=74 rport=59094 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.38.97 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771838372.634:59675): pid=459215 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=459217 suid=74 rport=59094 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.38.97 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771838372.849:59676): pid=459215 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=459215 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771838372.849:59677): pid=459215 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=209.38.38.97 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838383.027:59678): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838383.254:59679): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771838385.209:59680): pid=459290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=459290 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771838385.365:59681): pid=459289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=459290 suid=74 rport=54280 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771838385.366:59682): pid=459289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=459290 suid=74 rport=54280 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771838385.559:59683): pid=459289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=459289 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771838385.559:59684): pid=459289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838385.576:59685): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838385.724:59686): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771838387.563:59687): pid=459312 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=459312 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771838387.649:59688): pid=459311 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=459312 suid=74 rport=57660 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771838387.649:59689): pid=459311 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=459312 suid=74 rport=57660 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771838387.745:59690): pid=459311 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=459311 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771838387.745:59691): pid=459311 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838392.029:59692): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838392.280:59693): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838397.030:59694): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838397.034:59695): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838397.038:59696): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838397.041:59697): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838397.044:59698): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838397.344:59699): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838397.365:59700): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838397.385:59701): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838397.408:59702): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838397.474:59703): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771838411.855:59704): pid=459655 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=459655 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771838411.956:59705): pid=459654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=459655 suid=74 rport=46846 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771838411.956:59706): pid=459654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=459655 suid=74 rport=46846 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771838412.032:59707): pid=459654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=459654 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771838412.032:59708): pid=459654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1771838412.189:59709): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771838412.189:59710): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771838412.256:59711): pid=459656 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771838412.257:59712): pid=459656 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771838412.258:59713): pid=459656 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771838412.263:59714): pid=459656 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771838412.266:59715): pid=459656 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771838412.266:59716): pid=459656 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771838412.270:59717): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771838412.270:59718): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771838412.281:59719): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771838412.281:59720): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771838412.322:59721): pid=459671 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771838412.323:59722): pid=459671 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6365706861646D2E64343332396666306235383338396131633837343432376536666138636461646332353435303739313137633737343464643965646634613365346663383366202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771838412.323:59723): pid=459671 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771838412.324:59724): pid=459671 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771838412.912:59725): pid=459671 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771838412.913:59726): pid=459671 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771838413.011:59727): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771838413.011:59728): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771838413.360:59729): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771838413.360:59730): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771838413.420:59731): pid=459719 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771838413.420:59732): pid=459719 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771838413.421:59733): pid=459719 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771838413.432:59734): pid=459719 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771838413.435:59735): pid=459719 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771838413.436:59736): pid=459719 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=SERVICE_START msg=audit(1771838413.436:59737): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1771838413.439:59738): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771838413.439:59739): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_STOP msg=audit(1771838413.662:59740): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838416.026:59741): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838416.170:59742): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771838421.225:59743): pid=459778 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=459778 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771838421.227:59744): pid=459777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=459778 suid=74 rport=57658 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.38.97 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771838421.227:59745): pid=459777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=459778 suid=74 rport=57658 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.38.97 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771838421.476:59746): pid=459777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=459777 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771838421.476:59747): pid=459777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=209.38.38.97 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838423.026:59748): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838423.289:59749): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771838423.699:59750): pid=459815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=459815 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771838423.900:59751): pid=459814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=459815 suid=74 rport=44972 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771838423.900:59752): pid=459814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=459815 suid=74 rport=44972 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771838424.186:59753): pid=459814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=459814 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771838424.187:59754): pid=459814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838428.034:59755): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838428.037:59756): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838428.041:59757): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838428.045:59758): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838428.050:59759): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838428.288:59760): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838428.467:59761): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838428.493:59762): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838428.530:59763): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838428.622:59764): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838444.023:59765): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838444.253:59766): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771838446.735:59767): pid=460013 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=460013 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771838446.821:59768): pid=460012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=460013 suid=74 rport=34688 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771838446.821:59769): pid=460012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=460013 suid=74 rport=34688 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771838446.917:59770): pid=460012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=460012 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771838446.917:59771): pid=460012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838446.935:59772): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838447.052:59773): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838454.026:59774): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838454.245:59775): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838459.033:59776): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838459.038:59777): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838459.043:59778): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838459.048:59779): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838459.054:59780): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838459.322:59781): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838459.392:59782): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838459.503:59783): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838459.603:59784): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838459.646:59785): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771838461.554:59786): pid=460209 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=460209 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771838461.756:59787): pid=460208 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=460209 suid=74 rport=44182 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771838461.756:59788): pid=460208 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=460209 suid=74 rport=44182 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771838461.975:59789): pid=460208 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=460208 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771838461.975:59790): pid=460208 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771838466.150:59791): pid=460211 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=460211 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771838466.230:59792): pid=460210 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=460211 suid=74 rport=41204 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771838466.230:59793): pid=460210 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=460211 suid=74 rport=41204 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771838466.321:59794): pid=460210 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=460210 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771838466.321:59795): pid=460210 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771838467.972:59796): pid=460213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=460213 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771838468.082:59797): pid=460212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=460213 suid=74 rport=54324 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.38.97 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771838468.082:59798): pid=460212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=460213 suid=74 rport=54324 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.38.97 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771838468.164:59799): pid=460212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=460212 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771838468.164:59800): pid=460212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=209.38.38.97 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1771838473.668:59801): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771838473.669:59802): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771838473.741:59803): pid=460236 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771838473.742:59804): pid=460236 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771838473.743:59805): pid=460236 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771838473.748:59806): pid=460236 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771838473.751:59807): pid=460236 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771838473.751:59808): pid=460236 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771838473.759:59809): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771838473.759:59810): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771838473.773:59811): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771838473.773:59812): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771838473.832:59813): pid=460251 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771838473.832:59814): pid=460251 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6365706861646D2E64343332396666306235383338396131633837343432376536666138636461646332353435303739313137633737343464643965646634613365346663383366202D2D696D6167652072656769737472792E7265646861742E696F2F7268636570682F7268636570682D372D7268656C393A6C6174657374202D2D74696D656F757420383935206C73 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771838473.833:59815): pid=460251 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771838473.835:59816): pid=460251 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=SERVICE_START msg=audit(1771838474.536:59817): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838474.790:59818): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1771838475.412:59819): pid=460251 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771838475.412:59820): pid=460251 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771838475.417:59821): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771838475.417:59822): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771838475.447:59823): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771838475.447:59824): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771838475.510:59825): pid=460447 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771838475.511:59826): pid=460447 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771838475.511:59827): pid=460447 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771838475.516:59828): pid=460447 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771838475.519:59829): pid=460447 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771838475.519:59830): pid=460447 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771838475.523:59831): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771838475.523:59832): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771838475.526:59833): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771838475.526:59834): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771838475.586:59835): pid=460462 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771838475.586:59836): pid=460462 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6365706861646D2E64343332396666306235383338396131633837343432376536666138636461646332353435303739313137633737343464643965646634613365346663383366202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771838475.587:59837): pid=460462 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771838475.590:59838): pid=460462 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771838476.275:59839): pid=460462 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771838476.275:59840): pid=460462 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771838476.299:59841): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771838476.299:59842): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771838476.947:59843): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771838476.947:59844): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771838477.009:59845): pid=460508 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771838477.009:59846): pid=460508 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771838477.010:59847): pid=460508 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771838477.014:59848): pid=460508 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771838477.017:59849): pid=460508 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771838477.018:59850): pid=460508 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771838477.022:59851): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771838477.022:59852): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1771838478.025:59853): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838478.187:59854): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838485.031:59855): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838485.263:59856): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838490.030:59857): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838490.034:59858): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838490.038:59859): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838490.041:59860): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838490.045:59861): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838490.302:59862): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838490.401:59863): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838490.415:59864): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838490.418:59865): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838490.467:59866): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771838499.335:59867): pid=460755 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=460755 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771838499.540:59868): pid=460754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=460755 suid=74 rport=46472 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771838499.541:59869): pid=460754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=460755 suid=74 rport=46472 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771838499.757:59870): pid=460754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=460754 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771838499.758:59871): pid=460754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771838501.829:59872): pid=460757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=460757 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771838501.916:59873): pid=460756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=460757 suid=74 rport=48798 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771838501.916:59874): pid=460756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=460757 suid=74 rport=48798 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771838502.010:59875): pid=460756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=460756 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771838502.011:59876): pid=460756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838505.026:59877): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838505.216:59878): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838509.027:59879): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838509.168:59880): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771838513.062:59881): pid=460802 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=460802 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771838513.263:59882): pid=460801 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=460802 suid=74 rport=39900 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.38.97 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771838513.263:59883): pid=460801 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=460802 suid=74 rport=39900 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.38.97 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771838513.308:59884): pid=460801 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=460801 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771838513.308:59885): pid=460801 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=209.38.38.97 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771838515.626:59886): pid=460804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=460804 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771838515.713:59887): pid=460803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=460804 suid=74 rport=56556 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771838515.713:59888): pid=460803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=460804 suid=74 rport=56556 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771838515.800:59889): pid=460803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=460803 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771838515.800:59890): pid=460803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838515.812:59891): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838516.034:59892): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838521.033:59893): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838521.037:59894): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838521.041:59895): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838521.044:59896): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838521.048:59897): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838521.401:59898): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838521.447:59899): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838521.455:59900): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838521.496:59901): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838521.548:59902): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838536.027:59903): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838536.216:59904): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1771838537.276:59905): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771838537.276:59906): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771838537.344:59907): pid=461008 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771838537.344:59908): pid=461008 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771838537.347:59909): pid=461008 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771838537.352:59910): pid=461008 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771838537.355:59911): pid=461008 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771838537.355:59912): pid=461008 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771838537.360:59913): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771838537.360:59914): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771838537.370:59915): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771838537.370:59916): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771838537.375:59917): pid=461025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=461025 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_ACCT msg=audit(1771838537.431:59918): pid=461024 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771838537.431:59919): pid=461024 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6365706861646D2E64343332396666306235383338396131633837343432376536666138636461646332353435303739313137633737343464643965646634613365346663383366202D2D74696D656F75742038393520636865636B2D686F7374 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771838537.432:59920): pid=461024 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771838537.434:59921): pid=461024 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRYPTO_SESSION msg=audit(1771838537.574:59922): pid=461019 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=461025 suid=74 rport=55044 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771838537.574:59923): pid=461019 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=461025 suid=74 rport=55044 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771838537.764:59924): pid=461019 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=461019 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771838537.765:59925): pid=461019 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_END msg=audit(1771838537.868:59926): pid=461024 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771838537.869:59927): pid=461024 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771838537.873:59928): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771838537.873:59929): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771838537.945:59930): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771838537.945:59931): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771838537.997:59932): pid=461060 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771838537.997:59933): pid=461060 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771838537.997:59934): pid=461060 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771838538.000:59935): pid=461060 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771838538.002:59936): pid=461060 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771838538.003:59937): pid=461060 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771838538.007:59938): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771838538.007:59939): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771838538.011:59940): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771838538.011:59941): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771838538.071:59942): pid=461075 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771838538.072:59943): pid=461075 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6365706861646D2E64343332396666306235383338396131633837343432376536666138636461646332353435303739313137633737343464643965646634613365346663383366202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771838538.072:59944): pid=461075 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771838538.075:59945): pid=461075 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771838538.725:59946): pid=461075 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771838538.726:59947): pid=461075 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771838538.752:59948): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771838538.752:59949): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771838538.994:59950): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771838538.995:59951): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771838539.054:59952): pid=461123 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771838539.054:59953): pid=461123 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771838539.055:59954): pid=461123 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771838539.058:59955): pid=461123 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771838539.061:59956): pid=461123 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771838539.061:59957): pid=461123 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771838539.065:59958): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771838539.065:59959): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1771838540.028:59960): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838540.185:59961): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838547.034:59962): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838547.407:59963): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838552.029:59964): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838552.032:59965): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838552.036:59966): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838552.040:59967): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838552.043:59968): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838552.315:59969): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838552.350:59970): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838552.460:59971): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838552.488:59972): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838552.541:59973): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771838557.800:59974): pid=461374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=461374 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771838557.887:59975): pid=461373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=461374 suid=74 rport=49688 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771838557.887:59976): pid=461373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=461374 suid=74 rport=49688 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771838557.992:59977): pid=461373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=461373 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771838557.992:59978): pid=461373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771838558.792:59979): pid=461376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=461376 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771838558.793:59980): pid=461375 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=461376 suid=74 rport=33370 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.38.97 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771838558.793:59981): pid=461375 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=461376 suid=74 rport=33370 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.38.97 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771838559.085:59982): pid=461375 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=461375 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771838559.086:59983): pid=461375 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=209.38.38.97 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771838559.099:59984): pid=461378 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=461378 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771838559.173:59985): pid=461377 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=461378 suid=74 rport=47922 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=80.94.92.182 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771838559.173:59986): pid=461377 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=461378 suid=74 rport=47922 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=80.94.92.182 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771838560.568:59987): pid=461377 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=461378 suid=74 rport=47922 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=80.94.92.182 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771838560.569:59988): pid=461377 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=461378 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1771838560.569:59989): pid=461377 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=80.94.92.182 addr=80.94.92.182 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771838560.570:59990): pid=461377 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=461377 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771838560.570:59991): pid=461377 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=80.94.92.182 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771838565.387:59992): pid=461380 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=461380 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771838565.454:59993): pid=461379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=461380 suid=74 rport=48414 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771838565.454:59994): pid=461379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=461380 suid=74 rport=48414 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771838565.545:59995): pid=461379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=461379 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771838565.545:59996): pid=461379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838567.027:59997): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838567.192:59998): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838571.027:59999): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838571.169:60000): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771838575.351:60001): pid=461425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=461425 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771838575.560:60002): pid=461424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=461425 suid=74 rport=50242 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771838575.560:60003): pid=461424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=461425 suid=74 rport=50242 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771838575.780:60004): pid=461424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=461424 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771838575.780:60005): pid=461424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838578.029:60006): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838578.246:60007): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838583.029:60008): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838583.033:60009): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838583.037:60010): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838583.040:60011): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838583.044:60012): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838583.341:60013): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838583.395:60014): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838583.469:60015): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838583.498:60016): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838583.540:60017): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838598.026:60018): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838598.218:60019): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1771838599.315:60020): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771838599.315:60021): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771838599.383:60022): pid=461626 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771838599.383:60023): pid=461626 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771838599.384:60024): pid=461626 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771838599.389:60025): pid=461626 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771838599.392:60026): pid=461626 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771838599.392:60027): pid=461626 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771838599.400:60028): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771838599.400:60029): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771838599.414:60030): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771838599.414:60031): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771838599.471:60032): pid=461641 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771838599.471:60033): pid=461641 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6365706861646D2E64343332396666306235383338396131633837343432376536666138636461646332353435303739313137633737343464643965646634613365346663383366202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771838599.471:60034): pid=461641 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771838599.473:60035): pid=461641 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771838600.098:60036): pid=461641 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771838600.098:60037): pid=461641 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771838600.378:60038): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771838600.378:60039): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771838600.553:60040): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771838600.553:60041): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771838600.614:60042): pid=461687 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771838600.614:60043): pid=461687 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771838600.614:60044): pid=461687 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771838600.618:60045): pid=461687 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771838600.621:60046): pid=461687 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771838600.622:60047): pid=461687 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771838600.626:60048): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771838600.626:60049): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1771838602.031:60050): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838602.187:60051): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771838605.116:60052): pid=461720 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=461720 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771838605.119:60053): pid=461719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=461720 suid=74 rport=60120 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.38.97 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771838605.119:60054): pid=461719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=461720 suid=74 rport=60120 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.38.97 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771838605.275:60055): pid=461719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=461719 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771838605.276:60056): pid=461719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=209.38.38.97 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771838605.297:60057): pid=461721 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=461721 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771838605.425:60058): pid=461718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=461721 suid=74 rport=19166 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=80.94.95.116 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771838605.425:60059): pid=461718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=461721 suid=74 rport=19166 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=80.94.95.116 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771838606.297:60060): pid=461718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=461721 suid=74 rport=19166 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=80.94.95.116 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771838606.297:60061): pid=461718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=461721 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1771838606.298:60062): pid=461718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=80.94.95.116 addr=80.94.95.116 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771838606.299:60063): pid=461718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=461718 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771838606.299:60064): pid=461718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=80.94.95.116 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838609.026:60065): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838609.264:60066): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838614.031:60067): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838614.035:60068): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838614.039:60069): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838614.043:60070): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838614.047:60071): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838614.395:60072): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838614.404:60073): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838614.454:60074): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838614.508:60075): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771838614.548:60076): pid=461905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=461905 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=SERVICE_STOP msg=audit(1771838614.597:60077): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771838614.699:60078): pid=461908 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=461908 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771838614.754:60079): pid=461904 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=461905 suid=74 rport=41004 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771838614.754:60080): pid=461904 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=461905 suid=74 rport=41004 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771838614.785:60081): pid=461907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=461908 suid=74 rport=51094 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771838614.785:60082): pid=461907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=461908 suid=74 rport=51094 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771838614.881:60083): pid=461907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=461907 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771838614.881:60084): pid=461907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771838614.971:60085): pid=461904 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=461904 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771838614.971:60086): pid=461904 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771838615.807:60087): pid=461910 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=461910 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771838615.887:60088): pid=461909 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=461910 suid=74 rport=47366 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771838615.887:60089): pid=461909 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=461910 suid=74 rport=47366 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771838615.985:60090): pid=461909 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=461909 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771838615.985:60091): pid=461909 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838629.026:60092): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838629.191:60093): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838633.027:60094): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838633.146:60095): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838640.026:60096): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838640.244:60097): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838645.025:60098): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838645.029:60099): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838645.033:60100): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838645.036:60101): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838645.040:60102): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838645.362:60103): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838645.386:60104): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838645.416:60105): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838645.429:60106): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838645.457:60107): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771838651.790:60108): pid=462165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=462165 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771838651.864:60109): pid=462164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=462165 suid=74 rport=45212 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.38.97 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771838651.864:60110): pid=462164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=462165 suid=74 rport=45212 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.38.97 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771838651.990:60111): pid=462164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=462164 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771838651.990:60112): pid=462164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=209.38.38.97 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771838654.551:60113): pid=462167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=462167 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771838654.760:60114): pid=462166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=462167 suid=74 rport=42430 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771838654.760:60115): pid=462166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=462167 suid=74 rport=42430 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771838654.979:60116): pid=462166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=462166 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771838654.979:60117): pid=462166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838660.028:60118): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838660.272:60119): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1771838660.885:60120): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771838660.885:60121): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771838660.953:60122): pid=462193 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771838660.954:60123): pid=462193 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771838660.955:60124): pid=462193 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771838660.960:60125): pid=462193 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771838660.962:60126): pid=462193 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771838660.963:60127): pid=462193 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771838660.971:60128): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771838660.971:60129): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771838660.992:60130): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771838660.992:60131): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771838661.053:60132): pid=462208 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771838661.054:60133): pid=462208 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6365706861646D2E64343332396666306235383338396131633837343432376536666138636461646332353435303739313137633737343464643965646634613365346663383366202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771838661.054:60134): pid=462208 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771838661.057:60135): pid=462208 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771838661.767:60136): pid=462208 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771838661.767:60137): pid=462208 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771838661.796:60138): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771838661.796:60139): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771838663.405:60140): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771838663.405:60141): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771838663.468:60142): pid=462255 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771838663.468:60143): pid=462255 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771838663.469:60144): pid=462255 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771838663.512:60145): pid=462255 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=SERVICE_START msg=audit(1771838663.514:60146): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1771838663.516:60147): pid=462255 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771838663.516:60148): pid=462255 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771838663.525:60149): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771838663.525:60150): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_STOP msg=audit(1771838663.634:60151): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771838667.880:60152): pid=462290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=462290 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771838667.976:60153): pid=462289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=462290 suid=74 rport=42898 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771838667.976:60154): pid=462289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=462290 suid=74 rport=42898 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771838668.054:60155): pid=462289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=462289 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771838668.054:60156): pid=462289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838671.027:60157): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838671.316:60158): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771838674.508:60159): pid=462329 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=462329 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771838674.594:60160): pid=462328 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=462329 suid=74 rport=44904 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771838674.594:60161): pid=462328 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=462329 suid=74 rport=44904 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771838674.688:60162): pid=462328 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=462328 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771838674.688:60163): pid=462328 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838676.033:60164): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838676.037:60165): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838676.041:60166): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838676.045:60167): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838676.049:60168): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838676.403:60169): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838676.444:60170): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838676.488:60171): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838676.518:60172): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838676.542:60173): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838691.027:60174): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838691.228:60175): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838694.030:60176): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838694.173:60177): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771838695.496:60178): pid=462561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=462561 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771838695.705:60179): pid=462560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=462561 suid=74 rport=35486 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771838695.705:60180): pid=462560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=462561 suid=74 rport=35486 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771838695.924:60181): pid=462560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=462560 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771838695.924:60182): pid=462560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771838696.743:60183): pid=462563 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=462563 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771838696.813:60184): pid=462562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=462563 suid=74 rport=40427 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=65.49.1.219 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771838696.813:60185): pid=462562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=462563 suid=74 rport=40427 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=65.49.1.219 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771838700.132:60186): pid=462565 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=462565 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771838700.215:60187): pid=462564 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=462565 suid=74 rport=39478 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.38.97 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771838700.215:60188): pid=462564 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=462565 suid=74 rport=39478 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.38.97 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771838700.306:60189): pid=462564 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=462564 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771838700.306:60190): pid=462564 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=209.38.38.97 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771838700.726:60191): pid=462562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=462563 suid=74 rport=40427 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=65.49.1.219 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771838700.727:60192): pid=462562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=462563 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1771838700.728:60193): pid=462562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=65.49.1.219 addr=65.49.1.219 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771838700.729:60194): pid=462562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=462562 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771838700.729:60195): pid=462562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=65.49.1.219 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838702.026:60196): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838702.256:60197): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838707.028:60198): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838707.031:60199): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838707.034:60200): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838707.037:60201): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838707.040:60202): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838707.346:60203): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838707.391:60204): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838707.422:60205): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838707.456:60206): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838707.579:60207): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771838721.901:60208): pid=462738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=462738 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771838721.980:60209): pid=462737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=462738 suid=74 rport=54356 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771838721.981:60210): pid=462737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=462738 suid=74 rport=54356 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1771838722.026:60211): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771838722.072:60212): pid=462737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=462737 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771838722.073:60213): pid=462737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838722.220:60214): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1771838723.788:60215): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771838723.788:60216): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771838723.857:60217): pid=462766 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771838723.857:60218): pid=462766 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771838723.860:60219): pid=462766 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771838723.865:60220): pid=462766 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771838723.867:60221): pid=462766 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771838723.868:60222): pid=462766 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771838723.875:60223): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771838723.875:60224): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771838723.891:60225): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771838723.891:60226): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771838723.950:60227): pid=462781 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771838723.950:60228): pid=462781 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6365706861646D2E64343332396666306235383338396131633837343432376536666138636461646332353435303739313137633737343464643965646634613365346663383366202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771838723.951:60229): pid=462781 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771838723.953:60230): pid=462781 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771838724.661:60231): pid=462781 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771838724.661:60232): pid=462781 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771838724.815:60233): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771838724.815:60234): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1771838725.032:60235): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1771838725.052:60236): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771838725.052:60237): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771838725.116:60238): pid=462833 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771838725.117:60239): pid=462833 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771838725.117:60240): pid=462833 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771838725.121:60241): pid=462833 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771838725.124:60242): pid=462833 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771838725.125:60243): pid=462833 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771838725.130:60244): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771838725.130:60245): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_STOP msg=audit(1771838725.168:60246): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838733.029:60247): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838733.300:60248): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771838735.667:60249): pid=462898 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=462898 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771838735.872:60250): pid=462897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=462898 suid=74 rport=48856 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771838735.872:60251): pid=462897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=462898 suid=74 rport=48856 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771838736.088:60252): pid=462897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=462897 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771838736.088:60253): pid=462897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771838736.516:60254): pid=462900 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=462900 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771838736.649:60255): pid=462899 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=462900 suid=74 rport=60190 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771838736.649:60256): pid=462899 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=462900 suid=74 rport=60190 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771838736.708:60257): pid=462899 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=462899 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771838736.708:60258): pid=462899 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838738.025:60259): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838738.029:60260): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838738.032:60261): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838738.036:60262): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838738.039:60263): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838738.325:60264): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838738.381:60265): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838738.388:60266): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838738.400:60267): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838738.428:60268): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771838749.430:60269): pid=463083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=463083 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771838749.529:60270): pid=463082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=463083 suid=74 rport=49576 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.38.97 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771838749.529:60271): pid=463082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=463083 suid=74 rport=49576 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.38.97 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771838749.541:60272): pid=463082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=463082 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771838749.541:60273): pid=463082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=209.38.38.97 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838753.030:60274): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838753.230:60275): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838756.026:60276): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838756.143:60277): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838764.026:60278): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838764.270:60279): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838769.027:60280): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838769.030:60281): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838769.034:60282): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838769.037:60283): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838769.040:60284): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838769.375:60285): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838769.391:60286): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838769.408:60287): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838769.444:60288): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838769.544:60289): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771838774.481:60290): pid=463324 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=463324 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771838774.584:60291): pid=463323 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=463324 suid=74 rport=57698 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771838774.584:60292): pid=463323 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=463324 suid=74 rport=57698 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771838774.594:60293): pid=463323 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=463323 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771838774.594:60294): pid=463323 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771838777.422:60295): pid=463326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=463326 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771838777.630:60296): pid=463325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=463326 suid=74 rport=41440 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771838777.631:60297): pid=463325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=463326 suid=74 rport=41440 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771838777.851:60298): pid=463325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=463325 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771838777.851:60299): pid=463325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838784.026:60300): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838784.216:60301): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1771838785.368:60302): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771838785.368:60303): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771838785.434:60304): pid=463352 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771838785.435:60305): pid=463352 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771838785.437:60306): pid=463352 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771838785.441:60307): pid=463352 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771838785.444:60308): pid=463352 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771838785.444:60309): pid=463352 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771838785.452:60310): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771838785.452:60311): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771838785.472:60312): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771838785.472:60313): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771838785.521:60314): pid=463367 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771838785.521:60315): pid=463367 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6365706861646D2E64343332396666306235383338396131633837343432376536666138636461646332353435303739313137633737343464643965646634613365346663383366202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771838785.522:60316): pid=463367 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771838785.524:60317): pid=463367 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771838786.085:60318): pid=463367 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771838786.086:60319): pid=463367 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771838786.165:60320): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771838786.165:60321): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771838786.607:60322): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771838786.607:60323): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771838786.658:60324): pid=463430 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=463430 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771838786.659:60325): pid=463415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=463430 suid=74 rport=51088 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=80.94.92.182 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771838786.659:60326): pid=463415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=463430 suid=74 rport=51088 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=80.94.92.182 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ACCT msg=audit(1771838786.669:60327): pid=463416 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771838786.669:60328): pid=463416 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771838786.670:60329): pid=463416 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771838786.688:60330): pid=463416 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=SERVICE_START msg=audit(1771838786.692:60331): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1771838786.692:60332): pid=463416 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771838786.692:60333): pid=463416 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771838786.697:60334): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771838786.697:60335): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_STOP msg=audit(1771838786.839:60336): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771838787.655:60337): pid=463415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=463430 suid=74 rport=51088 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=80.94.92.182 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771838787.655:60338): pid=463415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=463430 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1771838787.656:60339): pid=463415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=80.94.92.182 addr=80.94.92.182 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771838787.657:60340): pid=463415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=463415 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771838787.657:60341): pid=463415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=80.94.92.182 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838795.026:60342): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838795.252:60343): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771838796.283:60344): pid=463486 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=463486 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771838796.284:60345): pid=463483 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=463486 suid=74 rport=54638 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.38.97 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771838796.284:60346): pid=463483 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=463486 suid=74 rport=54638 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.38.97 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771838796.498:60347): pid=463483 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=463483 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771838796.499:60348): pid=463483 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=209.38.38.97 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771838796.889:60349): pid=463489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=463489 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771838797.141:60350): pid=463488 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=463489 suid=74 rport=53022 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771838797.141:60351): pid=463488 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=463489 suid=74 rport=53022 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771838797.151:60352): pid=463488 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=463488 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771838797.151:60353): pid=463488 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838800.023:60354): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838800.025:60355): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838800.027:60356): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838800.030:60357): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838800.033:60358): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838800.397:60359): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838800.402:60360): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838800.444:60361): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838800.463:60362): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838800.575:60363): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771838805.181:60364): pid=463464 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=463464 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1771838805.254:60365): pid=463672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=463672 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=SERVICE_START msg=audit(1771838815.026:60366): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838815.186:60367): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838817.030:60368): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838817.185:60369): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771838818.953:60370): pid=463716 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=463716 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771838819.162:60371): pid=463715 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=463716 suid=74 rport=55282 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771838819.162:60372): pid=463715 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=463716 suid=74 rport=55282 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771838819.381:60373): pid=463715 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=463715 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771838819.381:60374): pid=463715 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771838824.430:60375): pid=463718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=463718 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771838824.494:60376): pid=463717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=463718 suid=74 rport=40280 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771838824.494:60377): pid=463717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=463718 suid=74 rport=40280 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771838824.582:60378): pid=463717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=463717 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771838824.582:60379): pid=463717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838826.026:60380): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838826.271:60381): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838831.025:60382): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838831.028:60383): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838831.032:60384): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838831.036:60385): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838831.042:60386): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838831.374:60387): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838831.409:60388): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838831.433:60389): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838831.436:60390): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838831.524:60391): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771838842.332:60392): pid=463895 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=463895 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771838842.494:60393): pid=463894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=463895 suid=74 rport=58526 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.38.97 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771838842.494:60394): pid=463894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=463895 suid=74 rport=58526 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.38.97 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771838842.524:60395): pid=463894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=463894 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771838842.524:60396): pid=463894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=209.38.38.97 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838846.026:60397): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838846.250:60398): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1771838846.947:60399): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771838846.947:60400): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771838847.018:60401): pid=463920 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771838847.019:60402): pid=463920 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771838847.020:60403): pid=463920 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771838847.025:60404): pid=463920 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771838847.028:60405): pid=463920 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771838847.029:60406): pid=463920 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771838847.034:60407): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771838847.034:60408): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771838847.054:60409): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771838847.054:60410): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771838847.116:60411): pid=463935 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771838847.117:60412): pid=463935 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6365706861646D2E64343332396666306235383338396131633837343432376536666138636461646332353435303739313137633737343464643965646634613365346663383366202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771838847.117:60413): pid=463935 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771838847.120:60414): pid=463935 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771838847.844:60415): pid=463935 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771838847.844:60416): pid=463935 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771838847.952:60417): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771838847.952:60418): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1771838848.025:60419): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1771838848.136:60420): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771838848.136:60421): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_STOP msg=audit(1771838848.189:60422): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1771838848.202:60423): pid=463999 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771838848.202:60424): pid=463999 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771838848.204:60425): pid=463999 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771838848.210:60426): pid=463999 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771838848.214:60427): pid=463999 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771838848.214:60428): pid=463999 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771838848.220:60429): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771838848.220:60430): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1771838857.028:60431): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838857.267:60432): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771838857.394:60433): pid=464051 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=464051 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771838857.524:60434): pid=464046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=464051 suid=74 rport=36440 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771838857.524:60435): pid=464046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=464051 suid=74 rport=36440 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771838857.675:60436): pid=464046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=464046 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771838857.675:60437): pid=464046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771838859.087:60438): pid=464086 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=464086 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771838859.398:60439): pid=464085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=464086 suid=74 rport=45800 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771838859.398:60440): pid=464085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=464086 suid=74 rport=45800 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771838859.553:60441): pid=464085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=464085 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771838859.554:60442): pid=464085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838862.030:60443): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838862.034:60444): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838862.039:60445): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838862.045:60446): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838862.050:60447): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838862.239:60448): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838862.414:60449): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838862.432:60450): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838862.477:60451): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838862.488:60452): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771838875.917:60453): pid=464234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=464234 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771838876.004:60454): pid=464233 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=464234 suid=74 rport=49766 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771838876.004:60455): pid=464233 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=464234 suid=74 rport=49766 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771838876.075:60456): pid=464233 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=464233 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771838876.075:60457): pid=464233 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838877.025:60458): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838877.237:60459): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838879.030:60460): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838879.151:60461): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838888.027:60462): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838888.259:60463): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771838888.837:60464): pid=464312 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=464312 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771838888.919:60465): pid=464311 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=464312 suid=74 rport=55186 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.38.97 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771838888.919:60466): pid=464311 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=464312 suid=74 rport=55186 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.38.97 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771838888.971:60467): pid=464311 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=464311 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771838888.971:60468): pid=464311 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=209.38.38.97 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838893.028:60469): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838893.031:60470): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838893.035:60471): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838893.039:60472): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838893.043:60473): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838893.339:60474): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838893.385:60475): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838893.391:60476): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838893.424:60477): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838893.482:60478): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771838897.154:60479): pid=464459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=464459 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771838897.360:60480): pid=464458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=464459 suid=74 rport=53720 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771838897.360:60481): pid=464458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=464459 suid=74 rport=53720 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771838898.229:60482): pid=464458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=464458 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771838898.229:60483): pid=464458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838908.027:60484): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838908.149:60485): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1771838908.459:60486): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771838908.459:60487): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771838908.532:60488): pid=464485 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771838908.532:60489): pid=464485 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771838908.534:60490): pid=464485 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771838908.539:60491): pid=464485 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771838908.542:60492): pid=464485 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771838908.542:60493): pid=464485 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771838908.549:60494): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771838908.549:60495): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771838908.560:60496): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771838908.560:60497): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771838908.616:60498): pid=464500 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771838908.617:60499): pid=464500 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6365706861646D2E64343332396666306235383338396131633837343432376536666138636461646332353435303739313137633737343464643965646634613365346663383366202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771838908.617:60500): pid=464500 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771838908.619:60501): pid=464500 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771838909.358:60502): pid=464500 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771838909.358:60503): pid=464500 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771838909.510:60504): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771838909.511:60505): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771838909.712:60506): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771838909.712:60507): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771838909.777:60508): pid=464548 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771838909.777:60509): pid=464548 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771838909.779:60510): pid=464548 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771838909.796:60511): pid=464548 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=SERVICE_START msg=audit(1771838909.799:60512): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1771838909.800:60513): pid=464548 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771838909.801:60514): pid=464548 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771838909.806:60515): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771838909.806:60516): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_STOP msg=audit(1771838909.962:60517): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771838918.249:60518): pid=464616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=464616 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771838918.334:60519): pid=464615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=464616 suid=74 rport=56064 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771838918.335:60520): pid=464615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=464616 suid=74 rport=56064 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771838918.430:60521): pid=464615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=464615 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771838918.430:60522): pid=464615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838918.451:60523): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838918.714:60524): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838924.026:60525): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838924.029:60526): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838924.033:60527): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838924.038:60528): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838924.041:60529): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838924.340:60530): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838924.425:60531): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838924.553:60532): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838924.566:60533): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838924.622:60534): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771838927.498:60535): pid=464794 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=464794 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771838927.578:60536): pid=464793 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=464794 suid=74 rport=41996 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771838927.578:60537): pid=464793 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=464794 suid=74 rport=41996 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771838927.668:60538): pid=464793 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=464793 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771838927.668:60539): pid=464793 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771838930.080:60540): pid=464796 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=464796 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771838930.155:60541): pid=464795 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=464796 suid=74 rport=41602 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=129.146.81.203 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771838930.156:60542): pid=464795 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=464796 suid=74 rport=41602 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=129.146.81.203 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771838935.356:60543): pid=464799 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=464799 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1771838935.372:60544): pid=464800 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=464800 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771838935.494:60545): pid=464797 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=464800 suid=74 rport=55340 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.38.97 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771838935.494:60546): pid=464797 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=464800 suid=74 rport=55340 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.38.97 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771838935.515:60547): pid=464797 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=464797 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771838935.515:60548): pid=464797 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=209.38.38.97 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1771838935.559:60549): pid=464798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=464799 suid=74 rport=50300 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771838935.559:60550): pid=464798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=464799 suid=74 rport=50300 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771838935.774:60551): pid=464798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=464798 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771838935.774:60552): pid=464798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771838938.059:60553): pid=464795 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=464796 suid=74 rport=41602 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=129.146.81.203 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771838938.059:60554): pid=464795 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=464796 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1771838938.060:60555): pid=464795 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=129.146.81.203 addr=129.146.81.203 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771838938.061:60556): pid=464795 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=464795 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771838938.061:60557): pid=464795 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=129.146.81.203 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838939.026:60558): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838939.210:60559): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838940.026:60560): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838940.145:60561): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838949.023:60562): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838949.244:60563): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838955.036:60564): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838955.041:60565): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838955.045:60566): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838955.049:60567): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838955.053:60568): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838955.332:60569): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838955.406:60570): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838955.429:60571): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838955.532:60572): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838955.542:60573): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838970.026:60574): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1771838970.055:60575): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771838970.055:60576): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771838970.119:60577): pid=465024 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771838970.120:60578): pid=465024 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771838970.121:60579): pid=465024 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771838970.126:60580): pid=465024 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771838970.129:60581): pid=465024 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771838970.129:60582): pid=465024 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771838970.133:60583): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771838970.133:60584): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771838970.150:60585): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771838970.150:60586): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1771838970.202:60587): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1771838970.217:60588): pid=465052 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771838970.217:60589): pid=465052 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6365706861646D2E64343332396666306235383338396131633837343432376536666138636461646332353435303739313137633737343464643965646634613365346663383366202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771838970.218:60590): pid=465052 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771838970.221:60591): pid=465052 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=SERVICE_STOP msg=audit(1771838970.224:60592): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838970.344:60593): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1771838970.906:60594): pid=465052 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771838970.906:60595): pid=465052 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771838971.088:60596): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771838971.088:60597): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771838971.286:60598): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771838971.286:60599): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771838971.354:60600): pid=465120 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771838971.355:60601): pid=465120 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771838971.356:60602): pid=465120 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771838971.360:60603): pid=465120 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771838971.364:60604): pid=465120 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771838971.364:60605): pid=465120 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771838971.369:60606): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771838971.369:60607): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771838974.167:60608): pid=465136 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=465136 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771838974.370:60609): pid=465135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=465136 suid=74 rport=44038 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771838974.371:60610): pid=465135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=465136 suid=74 rport=44038 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771838974.585:60611): pid=465135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=465135 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771838974.585:60612): pid=465135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771838977.130:60613): pid=465138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=465138 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771838977.215:60614): pid=465137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=465138 suid=74 rport=48706 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771838977.216:60615): pid=465137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=465138 suid=74 rport=48706 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771838977.312:60616): pid=465137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=465137 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771838977.312:60617): pid=465137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838980.023:60618): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838980.293:60619): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771838980.890:60620): pid=465207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=465207 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771838980.970:60621): pid=465206 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=465207 suid=74 rport=57916 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771838980.970:60622): pid=465206 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=465207 suid=74 rport=57916 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771838981.061:60623): pid=465206 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=465206 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771838981.061:60624): pid=465206 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771838983.802:60625): pid=465212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=465212 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771838983.803:60626): pid=465208 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=465212 suid=74 rport=56908 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.38.97 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771838983.804:60627): pid=465208 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=465212 suid=74 rport=56908 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.38.97 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771838984.004:60628): pid=465208 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=465208 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771838984.004:60629): pid=465208 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=209.38.38.97 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838986.024:60630): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838986.026:60631): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838986.029:60632): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838986.031:60633): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771838986.033:60634): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838986.341:60635): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838986.375:60636): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838986.411:60637): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838986.434:60638): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771838986.492:60639): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839001.026:60640): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839001.030:60641): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839001.209:60642): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839001.261:60643): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839011.029:60644): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839011.297:60645): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771839014.284:60646): pid=465437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=465437 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771839014.485:60647): pid=465436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=465437 suid=74 rport=34628 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771839014.485:60648): pid=465436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=465437 suid=74 rport=34628 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771839014.696:60649): pid=465436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=465436 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771839014.696:60650): pid=465436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839017.028:60651): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839017.031:60652): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839017.035:60653): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839017.039:60654): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839017.042:60655): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839017.283:60656): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839017.449:60657): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839017.501:60658): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839017.510:60659): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839017.544:60660): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771839029.548:60661): pid=465583 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=465583 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771839029.653:60662): pid=465582 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=465583 suid=74 rport=54254 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=80.94.92.182 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771839029.653:60663): pid=465582 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=465583 suid=74 rport=54254 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=80.94.92.182 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771839030.378:60664): pid=465582 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=465583 suid=74 rport=54254 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=80.94.92.182 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771839030.378:60665): pid=465582 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=465583 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1771839030.379:60666): pid=465582 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=80.94.92.182 addr=80.94.92.182 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771839030.380:60667): pid=465582 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=465582 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771839030.380:60668): pid=465582 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=80.94.92.182 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1771839031.617:60669): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839031.617:60670): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771839031.688:60671): pid=465584 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839031.688:60672): pid=465584 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839031.689:60673): pid=465584 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839031.707:60674): pid=465584 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=SERVICE_START msg=audit(1771839031.710:60675): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1771839031.710:60676): pid=465584 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839031.710:60677): pid=465584 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=SERVICE_START msg=audit(1771839031.714:60678): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1771839031.716:60679): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839031.717:60680): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839031.727:60681): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839031.727:60682): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771839031.795:60683): pid=465611 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839031.796:60684): pid=465611 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6365706861646D2E64343332396666306235383338396131633837343432376536666138636461646332353435303739313137633737343464643965646634613365346663383366202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839031.796:60685): pid=465611 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839031.800:60686): pid=465611 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=SERVICE_STOP msg=audit(1771839031.870:60687): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839032.003:60688): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1771839032.478:60689): pid=465611 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839032.478:60690): pid=465611 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839032.539:60691): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839032.540:60692): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839034.253:60693): pid=465689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=465689 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771839034.254:60694): pid=465688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=465689 suid=74 rport=33048 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.38.97 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771839034.254:60695): pid=465688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=465689 suid=74 rport=33048 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.38.97 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771839034.424:60696): pid=465688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=465688 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771839034.424:60697): pid=465688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=209.38.38.97 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1771839036.299:60698): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839036.299:60699): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771839036.365:60700): pid=465690 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839036.365:60701): pid=465690 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839036.367:60702): pid=465690 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839036.371:60703): pid=465690 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839036.374:60704): pid=465690 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839036.374:60705): pid=465690 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839036.385:60706): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839036.385:60707): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839037.609:60708): pid=465706 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=465706 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771839037.694:60709): pid=465705 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=465706 suid=74 rport=35722 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771839037.694:60710): pid=465705 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=465706 suid=74 rport=35722 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771839037.784:60711): pid=465705 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=465705 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771839037.784:60712): pid=465705 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771839039.863:60713): pid=465743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=465743 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771839039.953:60714): pid=465742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=465743 suid=74 rport=51060 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771839039.953:60715): pid=465742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=465743 suid=74 rport=51060 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771839040.049:60716): pid=465742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=465742 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771839040.049:60717): pid=465742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839042.027:60718): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839042.288:60719): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839048.031:60720): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839048.035:60721): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839048.039:60722): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839048.043:60723): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839048.048:60724): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839048.414:60725): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839048.449:60726): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839048.496:60727): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839048.544:60728): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839048.590:60729): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771839054.324:60730): pid=465921 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=465921 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771839054.625:60731): pid=465920 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=465921 suid=74 rport=55376 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771839054.626:60732): pid=465920 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=465921 suid=74 rport=55376 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771839054.795:60733): pid=465920 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=465920 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771839054.796:60734): pid=465920 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839062.029:60735): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839062.033:60736): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839062.165:60737): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839062.328:60738): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839073.026:60739): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839073.256:60740): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839079.031:60741): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839079.035:60742): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839079.039:60743): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839079.043:60744): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839079.046:60745): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839079.378:60746): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839079.421:60747): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839079.450:60748): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839079.538:60749): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839079.561:60750): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771839082.615:60751): pid=466162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=466162 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771839082.616:60752): pid=466161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=466162 suid=74 rport=37066 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.38.97 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771839082.616:60753): pid=466161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=466162 suid=74 rport=37066 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.38.97 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771839082.798:60754): pid=466161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=466161 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771839082.798:60755): pid=466161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=209.38.38.97 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771839090.737:60756): pid=466164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=466164 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771839090.750:60757): pid=466163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=466164 suid=74 rport=45804 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771839090.750:60758): pid=466163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=466164 suid=74 rport=45804 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771839090.917:60759): pid=466163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=466163 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771839090.917:60760): pid=466163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839093.027:60761): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839093.030:60762): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839093.250:60763): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839093.273:60764): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771839093.388:60765): pid=466210 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=466210 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771839093.586:60766): pid=466209 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=466210 suid=74 rport=38584 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771839093.586:60767): pid=466209 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=466210 suid=74 rport=38584 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771839093.803:60768): pid=466209 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=466209 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771839093.803:60769): pid=466209 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1771839096.662:60770): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839096.663:60771): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771839096.731:60772): pid=466211 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839096.731:60773): pid=466211 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839096.734:60774): pid=466211 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839096.738:60775): pid=466211 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839096.741:60776): pid=466211 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839096.741:60777): pid=466211 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839096.747:60778): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839096.747:60779): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839096.767:60780): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839096.767:60781): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771839096.826:60782): pid=466226 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839096.826:60783): pid=466226 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6365706861646D2E64343332396666306235383338396131633837343432376536666138636461646332353435303739313137633737343464643965646634613365346663383366202D2D696D6167652072656769737472792E7265646861742E696F2F7268636570682F7268636570682D372D7268656C393A6C6174657374202D2D74696D656F757420383935206C73 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839096.827:60784): pid=466226 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839096.829:60785): pid=466226 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839098.406:60786): pid=466226 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839098.407:60787): pid=466226 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839098.412:60788): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839098.412:60789): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839098.447:60790): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839098.447:60791): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771839098.509:60792): pid=466433 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839098.509:60793): pid=466433 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839098.510:60794): pid=466433 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839098.515:60795): pid=466433 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839098.518:60796): pid=466433 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839098.518:60797): pid=466433 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839098.522:60798): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839098.522:60799): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839098.524:60800): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839098.524:60801): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771839098.582:60802): pid=466448 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839098.582:60803): pid=466448 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6365706861646D2E64343332396666306235383338396131633837343432376536666138636461646332353435303739313137633737343464643965646634613365346663383366202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839098.583:60804): pid=466448 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839098.585:60805): pid=466448 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839099.279:60806): pid=466448 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839099.279:60807): pid=466448 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839099.337:60808): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839099.337:60809): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839100.200:60810): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839100.201:60811): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771839100.261:60812): pid=466494 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839100.261:60813): pid=466494 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839100.262:60814): pid=466494 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839100.266:60815): pid=466494 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839100.270:60816): pid=466494 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839100.270:60817): pid=466494 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839100.275:60818): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839100.275:60819): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839100.666:60820): pid=466510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=466510 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771839100.756:60821): pid=466509 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=466510 suid=74 rport=43904 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771839100.756:60822): pid=466509 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=466510 suid=74 rport=43904 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771839100.857:60823): pid=466509 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=466509 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771839100.857:60824): pid=466509 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839104.053:60825): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839104.289:60826): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839110.027:60827): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839110.031:60828): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839110.034:60829): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839110.038:60830): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839110.041:60831): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839110.382:60832): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839110.432:60833): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839110.536:60834): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839110.619:60835): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839110.745:60836): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839124.029:60837): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839124.033:60838): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839124.216:60839): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839124.241:60840): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771839130.866:60841): pid=466734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=466734 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771839130.868:60842): pid=466733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=466734 suid=74 rport=58770 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.38.97 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771839130.868:60843): pid=466733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=466734 suid=74 rport=58770 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.38.97 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771839131.156:60844): pid=466733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=466733 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771839131.156:60845): pid=466733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=209.38.38.97 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771839133.065:60846): pid=466736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=466736 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771839133.272:60847): pid=466735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=466736 suid=74 rport=47898 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771839133.273:60848): pid=466735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=466736 suid=74 rport=47898 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771839133.489:60849): pid=466735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=466735 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771839133.489:60850): pid=466735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839135.030:60851): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839135.264:60852): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839141.031:60853): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839141.035:60854): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839141.039:60855): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839141.043:60856): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839141.046:60857): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839141.388:60858): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839141.416:60859): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839141.465:60860): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839141.503:60861): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839141.598:60862): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771839144.620:60863): pid=466916 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=466916 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771839144.700:60864): pid=466915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=466916 suid=74 rport=35252 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771839144.700:60865): pid=466915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=466916 suid=74 rport=35252 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771839144.792:60866): pid=466915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=466915 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771839144.792:60867): pid=466915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839155.030:60868): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839155.034:60869): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839155.143:60870): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839155.248:60871): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771839157.598:60872): pid=466961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=466961 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771839157.686:60873): pid=466960 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=466961 suid=74 rport=56876 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771839157.686:60874): pid=466960 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=466961 suid=74 rport=56876 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771839157.777:60875): pid=466960 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=466960 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771839157.777:60876): pid=466960 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1771839160.540:60877): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839160.540:60878): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771839160.609:60879): pid=466996 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839160.609:60880): pid=466996 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839160.611:60881): pid=466996 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839160.617:60882): pid=466996 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839160.619:60883): pid=466996 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839160.619:60884): pid=466996 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839160.622:60885): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839160.622:60886): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839160.625:60887): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839160.625:60888): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771839160.685:60889): pid=467011 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839160.686:60890): pid=467011 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6365706861646D2E64343332396666306235383338396131633837343432376536666138636461646332353435303739313137633737343464643965646634613365346663383366202D2D74696D656F75742038393520636865636B2D686F7374 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839160.687:60891): pid=467011 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839160.689:60892): pid=467011 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839161.081:60893): pid=467011 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839161.081:60894): pid=467011 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839161.085:60895): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839161.085:60896): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839161.143:60897): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839161.143:60898): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771839161.184:60899): pid=467048 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839161.185:60900): pid=467048 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839161.186:60901): pid=467048 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839161.190:60902): pid=467048 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839161.192:60903): pid=467048 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839161.192:60904): pid=467048 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839161.197:60905): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839161.197:60906): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839161.200:60907): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839161.200:60908): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771839161.253:60909): pid=467063 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839161.253:60910): pid=467063 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6365706861646D2E64343332396666306235383338396131633837343432376536666138636461646332353435303739313137633737343464643965646634613365346663383366202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839161.254:60911): pid=467063 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839161.256:60912): pid=467063 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839161.892:60913): pid=467063 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839161.893:60914): pid=467063 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839161.956:60915): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839161.956:60916): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1771839166.025:60917): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839166.296:60918): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1771839167.516:60919): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839167.516:60920): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771839167.571:60921): pid=467142 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839167.571:60922): pid=467142 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839167.572:60923): pid=467142 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839167.575:60924): pid=467142 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839167.578:60925): pid=467142 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839167.578:60926): pid=467142 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839167.583:60927): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839167.583:60928): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839171.727:60929): pid=467161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=467161 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771839171.933:60930): pid=467160 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=467161 suid=74 rport=48038 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771839171.934:60931): pid=467160 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=467161 suid=74 rport=48038 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1771839172.027:60932): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839172.031:60933): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839172.035:60934): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839172.040:60935): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839172.045:60936): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771839172.282:60937): pid=467160 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=467160 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771839172.282:60938): pid=467160 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839172.405:60939): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839172.431:60940): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839172.432:60941): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839172.478:60942): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839172.582:60943): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771839177.908:60944): pid=467307 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=467307 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771839177.910:60945): pid=467306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=467307 suid=74 rport=54712 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.38.97 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771839177.910:60946): pid=467306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=467307 suid=74 rport=54712 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.38.97 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771839178.146:60947): pid=467306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=467306 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771839178.146:60948): pid=467306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=209.38.38.97 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839186.026:60949): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839186.031:60950): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839186.231:60951): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839186.241:60952): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771839194.020:60953): pid=467352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=467352 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771839194.132:60954): pid=467351 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=467352 suid=74 rport=23956 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=185.156.73.233 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771839194.132:60955): pid=467351 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=467352 suid=74 rport=23956 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=185.156.73.233 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771839195.923:60956): pid=467351 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=467352 suid=74 rport=23956 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=185.156.73.233 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771839195.924:60957): pid=467351 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=467352 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1771839195.924:60958): pid=467351 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=185.156.73.233 addr=185.156.73.233 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771839195.925:60959): pid=467351 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=467351 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771839195.925:60960): pid=467351 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=185.156.73.233 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839197.026:60961): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839197.241:60962): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771839198.334:60963): pid=467385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=467385 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771839198.335:60964): pid=467384 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=467385 suid=74 rport=47860 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771839198.336:60965): pid=467384 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=467385 suid=74 rport=47860 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771839198.553:60966): pid=467384 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=467384 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771839198.553:60967): pid=467384 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839203.027:60968): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839203.031:60969): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839203.035:60970): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839203.038:60971): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839203.042:60972): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839203.269:60973): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839203.420:60974): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839203.438:60975): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839203.524:60976): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839203.623:60977): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771839210.149:60978): pid=467522 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=467522 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771839210.351:60979): pid=467521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=467522 suid=74 rport=58560 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771839210.351:60980): pid=467521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=467522 suid=74 rport=58560 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771839210.563:60981): pid=467521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=467521 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771839210.563:60982): pid=467521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771839211.897:60983): pid=467524 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=467524 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771839212.014:60984): pid=467523 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=467524 suid=74 rport=44444 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771839212.014:60985): pid=467523 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=467524 suid=74 rport=44444 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771839212.099:60986): pid=467523 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=467523 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771839212.099:60987): pid=467523 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839217.028:60988): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839217.032:60989): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839217.224:60990): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839217.277:60991): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771839224.738:60992): pid=467602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=467602 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771839224.739:60993): pid=467601 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=467602 suid=74 rport=51572 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.38.97 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771839224.739:60994): pid=467601 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=467602 suid=74 rport=51572 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.38.97 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771839224.901:60995): pid=467601 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=467601 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771839224.901:60996): pid=467601 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=209.38.38.97 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1771839227.842:60997): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839227.842:60998): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771839227.905:60999): pid=467603 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839227.905:61000): pid=467603 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839227.907:61001): pid=467603 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839227.921:61002): pid=467603 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=SERVICE_START msg=audit(1771839227.923:61003): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1771839227.923:61004): pid=467603 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839227.925:61005): pid=467603 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839227.930:61006): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839227.930:61007): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839227.937:61008): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839227.937:61009): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771839227.989:61010): pid=467624 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839227.989:61011): pid=467624 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6365706861646D2E64343332396666306235383338396131633837343432376536666138636461646332353435303739313137633737343464643965646634613365346663383366202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839227.990:61012): pid=467624 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839227.994:61013): pid=467624 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=SERVICE_STOP msg=audit(1771839228.154:61014): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1771839228.711:61015): pid=467624 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839228.712:61016): pid=467624 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839228.780:61017): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839228.780:61018): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839232.540:61019): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839232.540:61020): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771839232.600:61021): pid=467695 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839232.601:61022): pid=467695 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839232.601:61023): pid=467695 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839232.606:61024): pid=467695 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839232.610:61025): pid=467695 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839232.610:61026): pid=467695 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839232.614:61027): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839232.614:61028): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1771839234.033:61029): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839234.038:61030): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839234.042:61031): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839234.045:61032): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839234.050:61033): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839234.344:61034): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839234.382:61035): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839234.452:61036): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839234.523:61037): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839234.661:61038): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771839247.018:61039): pid=467859 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=467859 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771839247.398:61040): pid=467858 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=467859 suid=74 rport=35124 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771839247.398:61041): pid=467858 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=467859 suid=74 rport=35124 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771839247.530:61042): pid=467858 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=467858 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771839247.530:61043): pid=467858 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839247.555:61044): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839247.559:61045): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839247.718:61046): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839247.879:61047): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771839249.219:61048): pid=467905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=467905 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771839249.220:61049): pid=467904 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=467905 suid=74 rport=48394 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771839249.220:61050): pid=467904 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=467905 suid=74 rport=48394 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771839249.436:61051): pid=467904 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=467904 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771839249.436:61052): pid=467904 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839259.027:61053): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839259.291:61054): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839265.028:61055): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839265.031:61056): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839265.035:61057): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839265.040:61058): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839265.044:61059): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771839265.259:61060): pid=468030 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=468030 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771839265.350:61061): pid=468024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=468030 suid=74 rport=35134 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771839265.350:61062): pid=468024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=468030 suid=74 rport=35134 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_STOP msg=audit(1771839265.391:61063): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839265.427:61064): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771839265.446:61065): pid=468024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=468024 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771839265.448:61066): pid=468024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839265.451:61067): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839265.502:61068): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839265.591:61069): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771839269.022:61070): pid=468087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=468087 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771839269.111:61071): pid=468086 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=468087 suid=74 rport=54736 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.38.97 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771839269.111:61072): pid=468086 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=468087 suid=74 rport=54736 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.38.97 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771839269.213:61073): pid=468086 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=468086 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771839269.213:61074): pid=468086 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=209.38.38.97 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771839271.007:61075): pid=468089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=468089 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771839271.130:61076): pid=468088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=468089 suid=74 rport=57400 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=80.94.92.182 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771839271.130:61077): pid=468088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=468089 suid=74 rport=57400 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=80.94.92.182 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771839271.629:61078): pid=468088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=468089 suid=74 rport=57400 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=80.94.92.182 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771839271.629:61079): pid=468088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=468089 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1771839271.630:61080): pid=468088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=80.94.92.182 addr=80.94.92.182 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771839271.631:61081): pid=468088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=468088 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771839271.631:61082): pid=468088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=80.94.92.182 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839278.036:61083): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839278.039:61084): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839278.261:61085): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839278.310:61086): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771839284.734:61087): pid=468171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=468171 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771839284.735:61088): pid=468170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=468171 suid=74 rport=37292 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771839284.735:61089): pid=468170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=468171 suid=74 rport=37292 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771839285.004:61090): pid=468170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=468170 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771839285.004:61091): pid=468170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839290.028:61092): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839290.318:61093): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1771839292.852:61094): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839292.852:61095): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771839292.920:61096): pid=468203 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839292.920:61097): pid=468203 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839292.922:61098): pid=468203 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839292.926:61099): pid=468203 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839292.929:61100): pid=468203 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839292.929:61101): pid=468203 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839292.938:61102): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839292.938:61103): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839292.952:61104): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839292.952:61105): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771839293.011:61106): pid=468218 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839293.011:61107): pid=468218 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6365706861646D2E64343332396666306235383338396131633837343432376536666138636461646332353435303739313137633737343464643965646634613365346663383366202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839293.012:61108): pid=468218 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839293.015:61109): pid=468218 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839293.691:61110): pid=468218 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839293.692:61111): pid=468218 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839293.802:61112): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839293.802:61113): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839295.291:61114): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839295.291:61115): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771839295.395:61116): pid=468264 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839295.395:61117): pid=468264 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839295.396:61118): pid=468264 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839295.415:61119): pid=468264 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=SERVICE_START msg=audit(1771839295.417:61120): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1771839295.418:61121): pid=468264 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839295.419:61122): pid=468264 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839295.423:61123): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839295.423:61124): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1771839295.526:61125): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839295.530:61126): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839295.534:61127): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839295.644:61128): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839295.646:61129): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839295.812:61130): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839295.937:61131): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839295.990:61132): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839296.019:61133): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771839302.991:61134): pid=468427 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=468427 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771839302.992:61135): pid=468426 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=468427 suid=74 rport=50662 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771839302.993:61136): pid=468426 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=468427 suid=74 rport=50662 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771839303.209:61137): pid=468426 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=468426 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771839303.209:61138): pid=468426 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839309.023:61139): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839309.026:61140): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839309.257:61141): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839309.311:61142): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771839314.649:61143): pid=468470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=468470 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771839314.751:61144): pid=468469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=468470 suid=74 rport=58074 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.38.97 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771839314.751:61145): pid=468469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=468470 suid=74 rport=58074 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.38.97 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771839314.760:61146): pid=468469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=468469 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771839314.760:61147): pid=468469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=209.38.38.97 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771839318.922:61148): pid=468472 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=468472 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771839319.011:61149): pid=468471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=468472 suid=74 rport=44538 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771839319.011:61150): pid=468471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=468472 suid=74 rport=44538 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771839319.108:61151): pid=468471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=468471 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771839319.109:61152): pid=468471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771839320.463:61153): pid=468474 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=468474 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771839320.464:61154): pid=468473 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=468474 suid=74 rport=32876 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=206.168.34.194 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771839320.464:61155): pid=468473 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=468474 suid=74 rport=32876 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=206.168.34.194 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1771839321.026:61156): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839321.280:61157): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771839322.408:61158): pid=468507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=468507 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771839322.617:61159): pid=468506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=468507 suid=74 rport=48678 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771839322.617:61160): pid=468506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=468507 suid=74 rport=48678 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771839322.836:61161): pid=468506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=468506 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771839322.836:61162): pid=468506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839326.032:61163): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839326.035:61164): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839326.038:61165): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839326.042:61166): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839326.049:61167): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839326.270:61168): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839326.433:61169): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839326.442:61170): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839326.504:61171): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839326.603:61172): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771839335.519:61173): pid=468473 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=468474 suid=74 rport=32876 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=206.168.34.194 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771839335.520:61174): pid=468473 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=468474 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771839335.520:61175): pid=468473 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=468473 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771839335.521:61176): pid=468473 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=206.168.34.194 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839340.024:61177): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839340.028:61178): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839340.176:61179): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839340.280:61180): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839352.026:61181): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839352.292:61182): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771839354.323:61183): pid=468761 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=468761 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771839354.405:61184): pid=468760 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=468761 suid=74 rport=47250 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771839354.405:61185): pid=468760 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=468761 suid=74 rport=47250 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771839354.499:61186): pid=468760 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=468760 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771839354.499:61187): pid=468760 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1771839355.681:61188): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839355.681:61189): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771839355.749:61190): pid=468762 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839355.749:61191): pid=468762 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839355.751:61192): pid=468762 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839355.756:61193): pid=468762 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839355.759:61194): pid=468762 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839355.759:61195): pid=468762 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839355.771:61196): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839355.771:61197): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839355.786:61198): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839355.786:61199): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771839355.848:61200): pid=468777 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839355.849:61201): pid=468777 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6365706861646D2E64343332396666306235383338396131633837343432376536666138636461646332353435303739313137633737343464643965646634613365346663383366202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839355.850:61202): pid=468777 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839355.853:61203): pid=468777 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839356.536:61204): pid=468777 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839356.536:61205): pid=468777 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839356.717:61206): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839356.717:61207): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839356.902:61208): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839356.903:61209): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771839356.963:61210): pid=468824 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839356.963:61211): pid=468824 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839356.964:61212): pid=468824 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839356.980:61213): pid=468824 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=SERVICE_START msg=audit(1771839356.982:61214): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1771839356.983:61215): pid=468824 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839356.984:61216): pid=468824 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=SERVICE_START msg=audit(1771839356.986:61217): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1771839356.988:61218): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839356.988:61219): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1771839356.990:61220): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839356.994:61221): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839356.999:61222): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839357.313:61223): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839357.366:61224): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839357.422:61225): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839357.461:61226): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839357.505:61227): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771839361.484:61228): pid=468988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=468988 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1771839361.613:61229): pid=468990 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=468990 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771839361.689:61230): pid=468987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=468988 suid=74 rport=53616 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771839361.689:61231): pid=468987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=468988 suid=74 rport=53616 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771839361.717:61232): pid=468989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=468990 suid=74 rport=51458 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.38.97 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771839361.717:61233): pid=468989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=468990 suid=74 rport=51458 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.38.97 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771839361.780:61234): pid=468989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=468989 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771839361.780:61235): pid=468989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=209.38.38.97 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771839361.944:61236): pid=468987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=468987 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771839361.944:61237): pid=468987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839371.030:61238): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839371.035:61239): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839371.206:61240): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839371.229:61241): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771839373.665:61242): pid=469056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=469056 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771839373.758:61243): pid=469055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=469056 suid=74 rport=52650 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771839373.759:61244): pid=469055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=469056 suid=74 rport=52650 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771839373.855:61245): pid=469055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=469055 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771839373.855:61246): pid=469055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839383.025:61247): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839383.306:61248): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839388.030:61249): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839388.034:61250): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839388.038:61251): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839388.042:61252): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839388.045:61253): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839388.273:61254): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839388.373:61255): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839388.467:61256): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839388.608:61257): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839388.638:61258): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771839400.095:61259): pid=469268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=469268 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771839400.303:61260): pid=469267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=469268 suid=74 rport=54482 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771839400.303:61261): pid=469267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=469268 suid=74 rport=54482 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771839400.519:61262): pid=469267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=469267 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771839400.519:61263): pid=469267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839402.027:61264): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839402.031:61265): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839402.155:61266): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839402.308:61267): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771839408.705:61268): pid=469313 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=469313 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771839408.784:61269): pid=469312 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=469313 suid=74 rport=58978 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.38.97 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771839408.784:61270): pid=469312 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=469313 suid=74 rport=58978 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.38.97 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771839408.875:61271): pid=469312 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=469312 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771839408.875:61272): pid=469312 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=209.38.38.97 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771839411.929:61273): pid=469315 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=469315 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771839411.930:61274): pid=469314 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=469315 suid=74 rport=55850 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771839411.930:61275): pid=469314 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=469315 suid=74 rport=55850 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771839412.202:61276): pid=469314 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=469314 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771839412.202:61277): pid=469314 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839414.026:61278): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839414.290:61279): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1771839417.235:61280): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839417.235:61281): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771839417.308:61282): pid=469348 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839417.308:61283): pid=469348 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839417.310:61284): pid=469348 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839417.315:61285): pid=469348 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839417.317:61286): pid=469348 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839417.318:61287): pid=469348 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839417.324:61288): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839417.324:61289): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839417.341:61290): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839417.341:61291): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771839417.401:61292): pid=469363 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839417.401:61293): pid=469363 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6365706861646D2E64343332396666306235383338396131633837343432376536666138636461646332353435303739313137633737343464643965646634613365346663383366202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839417.402:61294): pid=469363 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839417.405:61295): pid=469363 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839418.061:61296): pid=469363 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839418.062:61297): pid=469363 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839418.202:61298): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839418.202:61299): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839418.447:61300): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839418.448:61301): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771839418.511:61302): pid=469411 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839418.512:61303): pid=469411 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839418.513:61304): pid=469411 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839418.519:61305): pid=469411 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839418.522:61306): pid=469411 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839418.522:61307): pid=469411 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839418.526:61308): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839418.526:61309): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1771839418.536:61310): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839418.539:61311): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839418.544:61312): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839418.680:61313): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839418.684:61314): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839418.836:61315): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839418.931:61316): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839418.977:61317): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839419.004:61318): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839419.121:61319): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1771839420.878:61320): pid=26028 uid=0 auid=1002 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp521 spid=26031 suid=1002 rport=37840 laddr=192.168.122.105 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_SESSION msg=audit(1771839420.878:61321): pid=26028 uid=0 auid=1002 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp521 spid=26031 suid=1002 rport=37840 laddr=192.168.122.105 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_SESSION msg=audit(1771839420.886:61322): pid=25967 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp521 spid=25989 suid=1002 rport=37814 laddr=192.168.122.105 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_SESSION msg=audit(1771839420.886:61323): pid=25967 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp521 spid=25989 suid=1002 rport=37814 laddr=192.168.122.105 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839420.887:61324): pid=26028 uid=0 auid=1002 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=from-client spid=26031 suid=1002 rport=37840 laddr=192.168.122.105 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_SESSION msg=audit(1771839420.890:61325): pid=26085 uid=0 auid=1002 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp521 spid=26088 suid=1002 rport=37856 laddr=192.168.122.105 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_SESSION msg=audit(1771839420.890:61326): pid=26085 uid=0 auid=1002 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp521 spid=26088 suid=1002 rport=37856 laddr=192.168.122.105 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_SESSION msg=audit(1771839420.896:61327): pid=25985 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp521 spid=25993 suid=1002 rport=37826 laddr=192.168.122.105 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_SESSION msg=audit(1771839420.896:61328): pid=25985 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp521 spid=25993 suid=1002 rport=37826 laddr=192.168.122.105 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839420.907:61329): pid=25967 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=from-client spid=25989 suid=1002 rport=37814 laddr=192.168.122.105 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839420.908:61330): pid=26028 uid=0 auid=1002 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=from-server spid=26031 suid=1002 rport=37840 laddr=192.168.122.105 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839420.915:61331): pid=26085 uid=0 auid=1002 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=from-client spid=26088 suid=1002 rport=37856 laddr=192.168.122.105 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_SESSION msg=audit(1771839420.916:61332): pid=26047 uid=0 auid=1002 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp521 spid=26050 suid=1002 rport=37842 laddr=192.168.122.105 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_SESSION msg=audit(1771839420.916:61333): pid=26047 uid=0 auid=1002 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp521 spid=26050 suid=1002 rport=37842 laddr=192.168.122.105 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839420.917:61334): pid=25985 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=from-client spid=25993 suid=1002 rport=37826 laddr=192.168.122.105 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_SESSION msg=audit(1771839420.919:61335): pid=26066 uid=0 auid=1002 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp521 spid=26069 suid=1002 rport=37846 laddr=192.168.122.105 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_SESSION msg=audit(1771839420.919:61336): pid=26066 uid=0 auid=1002 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp521 spid=26069 suid=1002 rport=37846 laddr=192.168.122.105 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839420.923:61337): pid=25967 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=from-server spid=25989 suid=1002 rport=37814 laddr=192.168.122.105 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839420.926:61338): pid=26085 uid=0 auid=1002 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=from-server spid=26088 suid=1002 rport=37856 laddr=192.168.122.105 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839420.931:61339): pid=25985 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=from-server spid=25993 suid=1002 rport=37826 laddr=192.168.122.105 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839420.931:61340): pid=26047 uid=0 auid=1002 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=from-client spid=26050 suid=1002 rport=37842 laddr=192.168.122.105 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839420.936:61341): pid=26047 uid=0 auid=1002 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=from-server spid=26050 suid=1002 rport=37842 laddr=192.168.122.105 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839420.937:61342): pid=26066 uid=0 auid=1002 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=from-client spid=26069 suid=1002 rport=37846 laddr=192.168.122.105 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_SESSION msg=audit(1771839420.938:61343): pid=26009 uid=0 auid=1002 ses=17 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp521 spid=26012 suid=1002 rport=37832 laddr=192.168.122.105 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_SESSION msg=audit(1771839420.938:61344): pid=26009 uid=0 auid=1002 ses=17 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp521 spid=26012 suid=1002 rport=37832 laddr=192.168.122.105 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839420.942:61345): pid=26066 uid=0 auid=1002 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=from-server spid=26069 suid=1002 rport=37846 laddr=192.168.122.105 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839420.949:61346): pid=26009 uid=0 auid=1002 ses=17 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=from-client spid=26012 suid=1002 rport=37832 laddr=192.168.122.105 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839420.951:61347): pid=26009 uid=0 auid=1002 ses=17 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=from-server spid=26012 suid=1002 rport=37832 laddr=192.168.122.105 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_SESSION msg=audit(1771839425.527:61348): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp521 spid=26181 suid=1002 rport=40162 laddr=192.168.122.105 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_SESSION msg=audit(1771839425.527:61349): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp521 spid=26181 suid=1002 rport=40162 laddr=192.168.122.105 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839425.536:61350): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=from-client spid=26181 suid=1002 rport=40162 laddr=192.168.122.105 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839425.540:61351): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=from-server spid=26181 suid=1002 rport=40162 laddr=192.168.122.105 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_SESSION msg=audit(1771839427.937:61352): pid=26142 uid=0 auid=1002 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp521 spid=26145 suid=1002 rport=40140 laddr=192.168.122.105 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_SESSION msg=audit(1771839427.938:61353): pid=26142 uid=0 auid=1002 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp521 spid=26145 suid=1002 rport=40140 laddr=192.168.122.105 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_SESSION msg=audit(1771839427.940:61354): pid=26123 uid=0 auid=1002 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp521 spid=26126 suid=1002 rport=37874 laddr=192.168.122.105 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_SESSION msg=audit(1771839427.940:61355): pid=26123 uid=0 auid=1002 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp521 spid=26126 suid=1002 rport=37874 laddr=192.168.122.105 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_SESSION msg=audit(1771839427.952:61356): pid=26104 uid=0 auid=1002 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp521 spid=26107 suid=1002 rport=37858 laddr=192.168.122.105 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_SESSION msg=audit(1771839427.952:61357): pid=26104 uid=0 auid=1002 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp521 spid=26107 suid=1002 rport=37858 laddr=192.168.122.105 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_SESSION msg=audit(1771839427.955:61358): pid=26159 uid=0 auid=1002 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp521 spid=26162 suid=1002 rport=40146 laddr=192.168.122.105 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_SESSION msg=audit(1771839427.955:61359): pid=26159 uid=0 auid=1002 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp521 spid=26162 suid=1002 rport=40146 laddr=192.168.122.105 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839427.965:61360): pid=26142 uid=0 auid=1002 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=from-client spid=26145 suid=1002 rport=40140 laddr=192.168.122.105 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839427.970:61361): pid=26123 uid=0 auid=1002 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=from-client spid=26126 suid=1002 rport=37874 laddr=192.168.122.105 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839427.972:61362): pid=26104 uid=0 auid=1002 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=from-client spid=26107 suid=1002 rport=37858 laddr=192.168.122.105 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839427.976:61363): pid=26159 uid=0 auid=1002 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=from-client spid=26162 suid=1002 rport=40146 laddr=192.168.122.105 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839427.976:61364): pid=26104 uid=0 auid=1002 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=from-server spid=26107 suid=1002 rport=37858 laddr=192.168.122.105 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839427.978:61365): pid=26142 uid=0 auid=1002 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=from-server spid=26145 suid=1002 rport=40140 laddr=192.168.122.105 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839427.981:61366): pid=26123 uid=0 auid=1002 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=from-server spid=26126 suid=1002 rport=37874 laddr=192.168.122.105 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839427.983:61367): pid=26159 uid=0 auid=1002 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=from-server spid=26162 suid=1002 rport=40146 laddr=192.168.122.105 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839431.663:61368): pid=469572 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=469572 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771839431.753:61369): pid=469571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=469572 suid=74 rport=32772 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771839431.753:61370): pid=469571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=469572 suid=74 rport=32772 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771839431.855:61371): pid=469571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=469571 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771839431.855:61372): pid=469571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839433.023:61373): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839433.027:61374): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839433.151:61375): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839433.236:61376): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771839441.034:61377): pid=469618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=469618 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771839441.537:61378): pid=469617 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=469618 suid=74 rport=58586 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771839441.538:61379): pid=469617 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=469618 suid=74 rport=58586 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771839441.929:61380): pid=469617 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=469617 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771839441.929:61381): pid=469617 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839445.027:61382): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839445.274:61383): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839449.033:61384): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839449.036:61385): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839449.040:61386): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839449.043:61387): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839449.206:61388): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839449.269:61389): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839449.465:61390): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839449.507:61391): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839449.539:61392): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839449.544:61393): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771839458.045:61394): pid=469797 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=469797 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771839458.047:61395): pid=469796 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=469797 suid=74 rport=51186 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.38.97 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771839458.047:61396): pid=469796 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=469797 suid=74 rport=51186 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.38.97 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771839458.290:61397): pid=469796 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=469796 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771839458.290:61398): pid=469796 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=209.38.38.97 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839464.027:61399): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839464.031:61400): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839464.196:61401): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839464.259:61402): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771839465.972:61403): pid=469876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=469876 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771839465.973:61404): pid=469875 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=469876 suid=74 rport=34066 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771839465.973:61405): pid=469875 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=469876 suid=74 rport=34066 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771839466.161:61406): pid=469875 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=469875 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771839466.161:61407): pid=469875 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839476.029:61408): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839476.294:61409): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1771839478.924:61410): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839478.924:61411): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771839478.994:61412): pid=469909 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839478.994:61413): pid=469909 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839478.995:61414): pid=469909 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839478.999:61415): pid=469909 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839479.001:61416): pid=469909 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839479.001:61417): pid=469909 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839479.008:61418): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839479.008:61419): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839479.024:61420): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839479.024:61421): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771839479.075:61422): pid=469924 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839479.076:61423): pid=469924 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6365706861646D2E64343332396666306235383338396131633837343432376536666138636461646332353435303739313137633737343464643965646634613365346663383366202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839479.076:61424): pid=469924 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839479.079:61425): pid=469924 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839479.697:61426): pid=469924 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839479.697:61427): pid=469924 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839480.171:61428): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839480.171:61429): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1771839480.190:61430): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839480.194:61431): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839480.198:61432): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839480.202:61433): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839480.207:61434): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839480.516:61435): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839480.553:61436): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839480.573:61437): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839480.582:61438): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839480.604:61439): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771839482.418:61440): pid=470116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=470116 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771839482.681:61441): pid=470115 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=470116 suid=74 rport=42756 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771839482.681:61442): pid=470115 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=470116 suid=74 rport=42756 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771839482.883:61443): pid=470115 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=470115 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771839482.883:61444): pid=470115 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1771839483.195:61445): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839483.195:61446): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771839483.248:61447): pid=470117 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839483.248:61448): pid=470117 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839483.249:61449): pid=470117 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839483.254:61450): pid=470117 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839483.256:61451): pid=470117 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839483.257:61452): pid=470117 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839483.260:61453): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839483.260:61454): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839490.540:61455): pid=470137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=470137 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771839490.644:61456): pid=470136 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=470137 suid=74 rport=41866 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771839490.644:61457): pid=470136 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=470137 suid=74 rport=41866 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771839490.737:61458): pid=470136 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=470136 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771839490.737:61459): pid=470136 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839495.028:61460): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839495.031:61461): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839495.188:61462): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839495.281:61463): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771839500.447:61464): pid=470182 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=470182 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771839500.448:61465): pid=470181 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=470182 suid=74 rport=60588 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=80.94.92.182 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771839500.448:61466): pid=470181 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=470182 suid=74 rport=60588 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=80.94.92.182 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771839501.423:61467): pid=470181 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=470182 suid=74 rport=60588 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=80.94.92.182 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771839501.423:61468): pid=470181 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=470182 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1771839501.424:61469): pid=470181 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=80.94.92.182 addr=80.94.92.182 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771839501.425:61470): pid=470181 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=470181 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771839501.425:61471): pid=470181 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=80.94.92.182 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771839504.965:61472): pid=470184 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=470184 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771839505.028:61473): pid=470183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=470184 suid=74 rport=33630 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.38.97 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771839505.029:61474): pid=470183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=470184 suid=74 rport=33630 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.38.97 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771839505.114:61475): pid=470183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=470183 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771839505.114:61476): pid=470183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=209.38.38.97 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839507.022:61477): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839507.250:61478): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839511.026:61479): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839511.028:61480): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839511.030:61481): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839511.033:61482): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839511.035:61483): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839511.314:61484): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839511.375:61485): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839511.429:61486): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839511.483:61487): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839511.534:61488): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771839519.235:61489): pid=470361 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=470361 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771839519.326:61490): pid=470360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=470361 suid=74 rport=53342 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771839519.326:61491): pid=470360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=470361 suid=74 rport=53342 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771839519.413:61492): pid=470360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=470360 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771839519.413:61493): pid=470360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771839524.030:61494): pid=470398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=470398 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771839524.238:61495): pid=470397 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=470398 suid=74 rport=49814 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771839524.238:61496): pid=470397 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=470398 suid=74 rport=49814 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771839524.454:61497): pid=470397 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=470397 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771839524.454:61498): pid=470397 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839526.025:61499): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839526.030:61500): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839526.250:61501): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839526.302:61502): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839538.026:61503): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839538.255:61504): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839542.133:61505): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839542.137:61506): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839542.140:61507): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839542.144:61508): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839542.148:61509): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839542.381:61510): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839542.409:61511): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839542.472:61512): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839542.494:61513): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839542.520:61514): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1771839543.508:61515): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839543.509:61516): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771839543.588:61517): pid=470617 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839543.588:61518): pid=470617 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839543.590:61519): pid=470617 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839543.595:61520): pid=470617 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839543.597:61521): pid=470617 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839543.598:61522): pid=470617 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839543.606:61523): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839543.606:61524): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839543.613:61525): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839543.613:61526): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771839543.675:61527): pid=470632 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839543.675:61528): pid=470632 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6365706861646D2E64343332396666306235383338396131633837343432376536666138636461646332353435303739313137633737343464643965646634613365346663383366202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839543.676:61529): pid=470632 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839543.678:61530): pid=470632 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839544.366:61531): pid=470632 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839544.366:61532): pid=470632 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839544.504:61533): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839544.504:61534): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839544.570:61535): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839544.570:61536): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771839544.634:61537): pid=470676 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839544.635:61538): pid=470676 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839544.635:61539): pid=470676 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839544.639:61540): pid=470676 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839544.641:61541): pid=470676 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839544.642:61542): pid=470676 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839544.650:61543): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839544.650:61544): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839544.659:61545): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839544.660:61546): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771839544.720:61547): pid=470691 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839544.720:61548): pid=470691 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6365706861646D2E64343332396666306235383338396131633837343432376536666138636461646332353435303739313137633737343464643965646634613365346663383366202D2D696D6167652072656769737472792E7265646861742E696F2F7268636570682F7268636570682D372D7268656C393A6C6174657374202D2D74696D656F757420383935206C6973742D6E6574776F726B73 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839544.721:61549): pid=470691 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839544.723:61550): pid=470691 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839545.124:61551): pid=470691 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839545.124:61552): pid=470691 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839545.129:61553): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839545.129:61554): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839545.161:61555): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839545.161:61556): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771839545.221:61557): pid=470726 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839545.221:61558): pid=470726 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839545.222:61559): pid=470726 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839545.225:61560): pid=470726 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839545.227:61561): pid=470726 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839545.227:61562): pid=470726 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839545.232:61563): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839545.232:61564): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839545.235:61565): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839545.235:61566): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771839545.292:61567): pid=470741 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839545.293:61568): pid=470741 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6365706861646D2E64343332396666306235383338396131633837343432376536666138636461646332353435303739313137633737343464643965646634613365346663383366202D2D696D6167652072656769737472792E7265646861742E696F2F7268636570682F7268636570682D372D7268656C393A6C6174657374202D2D74696D656F75742038393520636570682D766F6C756D65202D2D667369642066316665613337312D636236392D353738642D613364302D623563343732613834623436202D2D20696E76656E746F7279202D2D666F726D61743D6A736F6E2D707265747479202D2D66696C7465722D666F722D6261746368 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839545.294:61569): pid=470741 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839545.296:61570): pid=470741 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=BPF msg=audit(1771839546.135:61571): prog-id=2323 op=LOAD
type=SYSCALL msg=audit(1771839546.135:61571): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc1d0897d0 a2=90 a3=9500000000 items=0 ppid=470815 pid=470816 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="ceph-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1771839546.135:61571): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F313431326564306438323361643538363932613763633730366232333338
type=BPF msg=audit(1771839546.186:61572): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771839546.577:61573): prog-id=2324 op=LOAD
type=SYSCALL msg=audit(1771839546.577:61573): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffc5d35e5e0 a2=90 a3=9500000001 items=0 ppid=470856 pid=470857 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="ceph-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1771839546.577:61573): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F366531353865643935343932643166653761653263303936646264646163
type=BPF msg=audit(1771839547.734:61574): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1771839547.843:61575): pid=470741 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839547.844:61576): pid=470741 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839547.849:61577): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839547.849:61578): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839548.091:61579): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839548.091:61580): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771839548.158:61581): pid=471948 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839548.158:61582): pid=471948 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839548.159:61583): pid=471948 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839548.164:61584): pid=471948 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839548.168:61585): pid=471948 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839548.168:61586): pid=471948 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839548.176:61587): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839548.176:61588): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839549.229:61589): pid=471964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=471964 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771839549.231:61590): pid=471963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=471964 suid=74 rport=49538 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771839549.231:61591): pid=471963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=471964 suid=74 rport=49538 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771839549.360:61592): pid=471963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=471963 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771839549.360:61593): pid=471963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771839552.996:61594): pid=471966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=471966 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771839553.076:61595): pid=471965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=471966 suid=74 rport=47836 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.38.97 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771839553.077:61596): pid=471965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=471966 suid=74 rport=47836 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.38.97 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771839553.168:61597): pid=471965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=471965 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771839553.168:61598): pid=471965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=209.38.38.97 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839557.031:61599): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839557.033:61600): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839557.175:61601): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839557.325:61602): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771839564.275:61603): pid=472012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=472012 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771839564.478:61604): pid=472011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=472012 suid=74 rport=41238 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771839564.478:61605): pid=472011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=472012 suid=74 rport=41238 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771839564.692:61606): pid=472011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=472011 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771839564.692:61607): pid=472011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839569.026:61608): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839569.250:61609): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771839570.338:61610): pid=472045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=472045 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771839570.420:61611): pid=472044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=472045 suid=74 rport=49524 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771839570.421:61612): pid=472044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=472045 suid=74 rport=49524 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771839570.513:61613): pid=472044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=472044 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771839570.513:61614): pid=472044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839573.029:61615): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839573.032:61616): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839573.036:61617): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839573.039:61618): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839573.043:61619): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839573.382:61620): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839573.401:61621): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839573.464:61622): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839573.508:61623): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839573.595:61624): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839588.024:61625): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839588.028:61626): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839588.156:61627): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839588.312:61628): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839600.029:61629): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839600.278:61630): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771839601.601:61631): pid=472300 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=472300 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771839601.603:61632): pid=472298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=472300 suid=74 rport=54492 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.38.97 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771839601.603:61633): pid=472298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=472300 suid=74 rport=54492 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.38.97 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771839601.918:61634): pid=472298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=472298 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771839601.919:61635): pid=472298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=209.38.38.97 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771839602.695:61636): pid=472302 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=472302 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771839602.904:61637): pid=472301 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=472302 suid=74 rport=40950 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771839602.904:61638): pid=472301 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=472302 suid=74 rport=40950 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771839603.124:61639): pid=472301 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=472301 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771839603.124:61640): pid=472301 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=209.38.85.143 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839604.039:61641): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839604.043:61642): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839604.047:61643): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839604.051:61644): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839604.054:61645): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839604.373:61646): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839604.423:61647): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839604.431:61648): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839604.507:61649): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839604.600:61650): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771839607.140:61651): pid=472446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=472446 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771839607.281:61652): pid=472445 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=472446 suid=74 rport=49602 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771839607.281:61653): pid=472445 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=472446 suid=74 rport=49602 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771839607.373:61654): pid=472445 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=472445 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771839607.373:61655): pid=472445 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1771839608.437:61656): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839608.437:61657): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771839608.508:61658): pid=472450 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839608.508:61659): pid=472450 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839608.509:61660): pid=472450 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839608.514:61661): pid=472450 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839608.518:61662): pid=472450 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839608.518:61663): pid=472450 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839608.528:61664): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839608.528:61665): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839608.545:61666): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839608.545:61667): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771839608.606:61668): pid=472465 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839608.606:61669): pid=472465 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6365706861646D2E64343332396666306235383338396131633837343432376536666138636461646332353435303739313137633737343464643965646634613365346663383366202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839608.606:61670): pid=472465 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839608.609:61671): pid=472465 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839609.304:61672): pid=472465 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839609.305:61673): pid=472465 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839609.428:61674): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839609.428:61675): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839612.043:61676): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839612.043:61677): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771839612.107:61678): pid=472512 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839612.107:61679): pid=472512 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839612.108:61680): pid=472512 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839612.112:61681): pid=472512 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839612.118:61682): pid=472512 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839612.118:61683): pid=472512 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839612.123:61684): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839612.123:61685): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1771839619.028:61686): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839619.032:61687): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839619.151:61688): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839619.278:61689): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771839622.575:61690): pid=472569 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=472569 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771839622.654:61691): pid=472568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=472569 suid=74 rport=50632 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771839622.654:61692): pid=472568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=472569 suid=74 rport=50632 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771839622.744:61693): pid=472568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=472568 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771839622.744:61694): pid=472568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839631.023:61695): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839631.281:61696): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839635.029:61697): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839635.032:61698): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839635.036:61699): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839635.040:61700): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839635.044:61701): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839635.316:61702): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839635.404:61703): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839635.436:61704): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839635.510:61705): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839635.549:61706): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771839648.639:61707): pid=472778 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=472778 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771839648.719:61708): pid=472777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=472778 suid=74 rport=38040 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.38.97 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771839648.720:61709): pid=472777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=472778 suid=74 rport=38040 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.38.97 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771839648.812:61710): pid=472777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=472777 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771839648.812:61711): pid=472777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=209.38.38.97 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839650.032:61712): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839650.037:61713): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839650.192:61714): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839650.268:61715): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771839661.136:61716): pid=472823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=472823 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771839661.231:61717): pid=472822 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=472823 suid=74 rport=60370 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771839661.233:61718): pid=472822 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=472823 suid=74 rport=60370 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771839661.318:61719): pid=472822 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=472822 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771839661.318:61720): pid=472822 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839661.766:61721): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839662.014:61722): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839666.025:61723): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839666.029:61724): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839666.032:61725): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839666.036:61726): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839666.042:61727): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839666.368:61728): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839666.390:61729): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839666.440:61730): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839666.492:61731): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839666.618:61732): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771839672.152:61733): pid=473031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=473031 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771839672.232:61734): pid=473030 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=473031 suid=74 rport=48862 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771839672.232:61735): pid=473030 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=473031 suid=74 rport=48862 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771839672.342:61736): pid=473030 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=473030 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771839672.343:61737): pid=473030 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1771839672.396:61738): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839672.396:61739): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771839672.461:61740): pid=473032 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839672.461:61741): pid=473032 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839672.463:61742): pid=473032 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839672.467:61743): pid=473032 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839672.469:61744): pid=473032 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839672.469:61745): pid=473032 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839672.479:61746): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839672.479:61747): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839672.495:61748): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839672.495:61749): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771839672.552:61750): pid=473047 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839672.552:61751): pid=473047 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6365706861646D2E64343332396666306235383338396131633837343432376536666138636461646332353435303739313137633737343464643965646634613365346663383366202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839672.553:61752): pid=473047 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839672.555:61753): pid=473047 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839673.245:61754): pid=473047 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839673.246:61755): pid=473047 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839673.445:61756): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839673.445:61757): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839673.618:61758): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839673.618:61759): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771839673.684:61760): pid=473094 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839673.684:61761): pid=473094 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839673.685:61762): pid=473094 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839673.689:61763): pid=473094 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839673.693:61764): pid=473094 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839673.693:61765): pid=473094 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839673.697:61766): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839673.697:61767): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1771839681.027:61768): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839681.031:61769): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839681.216:61770): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839681.246:61771): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839693.029:61772): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839693.275:61773): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839697.027:61774): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839697.031:61775): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839697.035:61776): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839697.039:61777): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839697.042:61778): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839697.386:61779): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839697.410:61780): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839697.448:61781): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839697.471:61782): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839697.506:61783): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839712.027:61784): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839712.031:61785): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839712.259:61786): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771839712.279:61787): pid=473404 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=473404 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771839712.281:61788): pid=473403 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=473404 suid=74 rport=43504 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771839712.281:61789): pid=473403 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=473404 suid=74 rport=43504 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_STOP msg=audit(1771839712.310:61790): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1771839712.349:61791): pid=473403 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1771839712.363:61792): pid=473403 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771839712.363:61793): pid=473403 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:fd:28:52:d8:9e:43:ab:ba:3d:3f:9f:5e:fc:d9:a0:40:e4:52:01:c2:4e:07:0b:b8:e8:7b:a8:d3:71:c1:74:1e exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1771839712.392:61794): pid=473403 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771839712.392:61795): pid=473403 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=473404 suid=74 rport=43504 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1771839712.394:61796): pid=473403 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1771839712.395:61797): pid=473403 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=223 res=1UID="root" OLD-AUID="unset" AUID="zuul"
type=SYSCALL msg=audit(1771839712.395:61797): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7fff46addcc0 a2=4 a3=3e8 items=0 ppid=416325 pid=473403 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=223 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1771839712.395:61797): proctitle=737368643A207A75756C205B707269765D
type=USER_ROLE_CHANGE msg=audit(1771839712.396:61798): pid=473403 uid=0 auid=1000 ses=223 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_ACCT msg=audit(1771839712.446:61799): pid=473406 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_ACQ msg=audit(1771839712.446:61800): pid=473406 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="zuul" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_ROLE_CHANGE msg=audit(1771839712.447:61801): pid=473406 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1771839712.447:61802): pid=473406 uid=0 subj=system_u:system_r:init_t:s0 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=224 res=1UID="root" OLD-AUID="unset" AUID="zuul"
type=SYSCALL msg=audit(1771839712.447:61802): arch=c000003e syscall=1 success=yes exit=4 a0=7 a1=7ffdc1fc8400 a2=4 a3=3e8 items=0 ppid=1 pid=473406 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=224 comm="(systemd)" exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1771839712.447:61802): proctitle="(systemd)"
type=USER_START msg=audit(1771839712.449:61803): pid=473406 uid=0 auid=1000 ses=224 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="zuul" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SERVICE_START msg=audit(1771839712.587:61804): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1771839712.607:61805): pid=473403 uid=0 auid=1000 ses=223 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771839712.608:61806): pid=473422 uid=0 auid=1000 ses=223 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=473422 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="root"
type=CRED_ACQ msg=audit(1771839712.610:61807): pid=473422 uid=0 auid=1000 ses=223 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_LOGIN msg=audit(1771839712.654:61808): pid=473403 uid=0 auid=1000 ses=223 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771839712.654:61809): pid=473403 uid=0 auid=1000 ses=223 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771839712.655:61810): pid=473403 uid=0 auid=1000 ses=223 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=473423 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1771839712.720:61811): pid=473436 uid=1000 auid=1000 ses=223 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1771839712.721:61812): pid=473436 uid=1000 auid=1000 ses=223 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E656471756D726A6E63676E67776B6E6A70656E6D6A7364667967716A707A75203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1771839712.722:61813): pid=473436 uid=1000 auid=1000 ses=223 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1771839712.726:61814): pid=473436 uid=1000 auid=1000 ses=223 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771839713.710:61815): pid=473436 uid=1000 auid=1000 ses=223 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1771839713.711:61816): pid=473436 uid=1000 auid=1000 ses=223 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771839713.715:61817): pid=473403 uid=0 auid=1000 ses=223 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771839713.716:61818): pid=473403 uid=0 auid=1000 ses=223 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771839715.359:61819): pid=473442 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=473442 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771839715.448:61820): pid=473441 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=473442 suid=74 rport=36668 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771839715.449:61821): pid=473441 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=473442 suid=74 rport=36668 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771839715.541:61822): pid=473441 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=473441 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771839715.541:61823): pid=473441 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771839720.851:61824): pid=473444 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=473444 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771839720.950:61825): pid=473443 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=473444 suid=74 rport=35498 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=80.94.92.182 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771839720.950:61826): pid=473443 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=473444 suid=74 rport=35498 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=80.94.92.182 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771839721.688:61827): pid=473443 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=473444 suid=74 rport=35498 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=80.94.92.182 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771839721.688:61828): pid=473443 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=473444 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1771839721.689:61829): pid=473443 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=80.94.92.182 addr=80.94.92.182 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771839721.690:61830): pid=473443 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=473443 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771839721.690:61831): pid=473443 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=80.94.92.182 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839724.027:61832): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771839724.071:61833): pid=473456 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=473456 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771839724.151:61834): pid=473451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=473456 suid=74 rport=54578 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771839724.151:61835): pid=473451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=473456 suid=74 rport=54578 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771839724.241:61836): pid=473451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=473451 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771839724.241:61837): pid=473451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839724.305:61838): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839728.025:61839): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839728.029:61840): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839728.035:61841): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839728.040:61842): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839728.045:61843): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839728.324:61844): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839728.405:61845): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839728.427:61846): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839728.545:61847): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839728.568:61848): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1771839733.944:61849): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839733.944:61850): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771839734.010:61851): pid=473624 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839734.010:61852): pid=473624 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839734.011:61853): pid=473624 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839734.016:61854): pid=473624 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839734.019:61855): pid=473624 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839734.019:61856): pid=473624 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839734.033:61857): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839734.033:61858): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839734.043:61859): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839734.043:61860): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771839734.104:61861): pid=473639 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839734.104:61862): pid=473639 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6365706861646D2E64343332396666306235383338396131633837343432376536666138636461646332353435303739313137633737343464643965646634613365346663383366202D2D696D6167652072656769737472792E7265646861742E696F2F7268636570682F7268636570682D372D7268656C393A6C6174657374202D2D74696D656F757420383935206C73 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839734.105:61863): pid=473639 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839734.108:61864): pid=473639 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839735.713:61865): pid=473639 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839735.714:61866): pid=473639 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839735.718:61867): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839735.718:61868): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839735.759:61869): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839735.759:61870): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771839735.821:61871): pid=473815 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839735.821:61872): pid=473815 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839735.822:61873): pid=473815 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839735.826:61874): pid=473815 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839735.829:61875): pid=473815 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839735.829:61876): pid=473815 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839735.832:61877): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839735.833:61878): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839735.835:61879): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839735.835:61880): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771839735.884:61881): pid=473830 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839735.884:61882): pid=473830 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6365706861646D2E64343332396666306235383338396131633837343432376536666138636461646332353435303739313137633737343464643965646634613365346663383366202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839735.885:61883): pid=473830 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839735.887:61884): pid=473830 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839736.454:61885): pid=473830 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839736.454:61886): pid=473830 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839736.516:61887): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839736.516:61888): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839737.281:61889): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839737.281:61890): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771839737.342:61891): pid=473877 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839737.343:61892): pid=473877 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839737.344:61893): pid=473877 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839737.347:61894): pid=473877 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839737.351:61895): pid=473877 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839737.351:61896): pid=473877 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839737.355:61897): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839737.355:61898): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1771839743.035:61899): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839743.038:61900): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839743.235:61901): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839743.267:61902): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1771839743.649:61903): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839743.649:61904): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771839743.713:61905): pid=473933 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839743.714:61906): pid=473933 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839743.715:61907): pid=473933 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839743.720:61908): pid=473933 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839743.723:61909): pid=473933 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839743.724:61910): pid=473933 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839743.728:61911): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839743.728:61912): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839745.023:61913): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839745.023:61914): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771839745.084:61915): pid=473948 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839745.085:61916): pid=473948 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839745.085:61917): pid=473948 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839745.089:61918): pid=473948 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839745.092:61919): pid=473948 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839745.092:61920): pid=473948 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839745.098:61921): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839745.098:61922): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839746.248:61923): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839746.248:61924): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771839746.304:61925): pid=473963 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839746.304:61926): pid=473963 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839746.305:61927): pid=473963 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839746.308:61928): pid=473963 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839746.311:61929): pid=473963 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839746.311:61930): pid=473963 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839746.316:61931): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839746.316:61932): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1771839755.031:61933): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839755.306:61934): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1771839755.617:61935): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839755.617:61936): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771839755.698:61937): pid=474009 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839755.699:61938): pid=474009 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839755.699:61939): pid=474009 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839755.703:61940): pid=474009 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839755.706:61941): pid=474009 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839755.707:61942): pid=474009 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839755.712:61943): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839755.712:61944): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839756.818:61945): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839756.818:61946): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771839756.880:61947): pid=474024 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839756.881:61948): pid=474024 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839756.881:61949): pid=474024 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839756.884:61950): pid=474024 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839756.887:61951): pid=474024 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839756.887:61952): pid=474024 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839756.891:61953): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839756.891:61954): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839758.010:61955): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839758.010:61956): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771839758.072:61957): pid=474039 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839758.072:61958): pid=474039 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839758.073:61959): pid=474039 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839758.075:61960): pid=474039 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839758.078:61961): pid=474039 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839758.079:61962): pid=474039 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839758.083:61963): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839758.083:61964): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1771839759.028:61965): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839759.030:61966): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839759.031:61967): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839759.034:61968): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839759.037:61969): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1771839759.112:61970): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839759.112:61971): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771839759.160:61972): pid=474102 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839759.160:61973): pid=474102 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839759.161:61974): pid=474102 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839759.167:61975): pid=474102 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839759.168:61976): pid=474102 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839759.169:61977): pid=474102 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839759.173:61978): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839759.173:61979): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_STOP msg=audit(1771839759.389:61980): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839759.407:61981): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839759.441:61982): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839759.476:61983): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839759.558:61984): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1771839760.276:61985): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839760.276:61986): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771839760.339:61987): pid=474243 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839760.339:61988): pid=474243 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839760.341:61989): pid=474243 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839760.346:61990): pid=474243 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839760.349:61991): pid=474243 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839760.350:61992): pid=474243 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839760.354:61993): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839760.354:61994): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839761.329:61995): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839761.329:61996): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771839761.386:61997): pid=474258 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839761.386:61998): pid=474258 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839761.387:61999): pid=474258 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839761.389:62000): pid=474258 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839761.391:62001): pid=474258 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839761.392:62002): pid=474258 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839761.396:62003): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839761.396:62004): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839761.399:62005): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839761.399:62006): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771839761.456:62007): pid=474273 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839761.456:62008): pid=474273 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6365706861646D2E64343332396666306235383338396131633837343432376536666138636461646332353435303739313137633737343464643965646634613365346663383366202D2D74696D656F75742038393520636865636B2D686F7374 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839761.458:62009): pid=474273 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839761.460:62010): pid=474273 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839761.901:62011): pid=474273 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839761.901:62012): pid=474273 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839761.906:62013): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839761.906:62014): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839762.127:62015): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839762.127:62016): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771839762.186:62017): pid=474310 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839762.186:62018): pid=474310 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839762.188:62019): pid=474310 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839762.191:62020): pid=474310 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839762.194:62021): pid=474310 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839762.194:62022): pid=474310 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839762.198:62023): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839762.198:62024): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839770.166:62025): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839770.166:62026): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771839770.226:62027): pid=474325 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839770.226:62028): pid=474325 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839770.227:62029): pid=474325 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839770.231:62030): pid=474325 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839770.235:62031): pid=474325 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839770.235:62032): pid=474325 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839770.238:62033): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839770.238:62034): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839772.538:62035): pid=474341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=474341 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771839772.625:62036): pid=474340 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=474341 suid=74 rport=46322 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771839772.625:62037): pid=474340 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=474341 suid=74 rport=46322 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771839772.722:62038): pid=474340 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=474340 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771839772.722:62039): pid=474340 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1771839772.795:62040): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839772.795:62041): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771839772.858:62042): pid=474342 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839772.859:62043): pid=474342 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839772.860:62044): pid=474342 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839772.863:62045): pid=474342 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839772.866:62046): pid=474342 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839772.866:62047): pid=474342 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839772.871:62048): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839772.871:62049): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839773.306:62050): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839773.307:62051): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771839773.368:62052): pid=474357 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839773.368:62053): pid=474357 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839773.369:62054): pid=474357 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839773.387:62055): pid=474357 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839773.391:62056): pid=474357 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839773.392:62057): pid=474357 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=SERVICE_START msg=audit(1771839773.392:62058): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1771839773.396:62059): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839773.396:62060): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1771839773.396:62061): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839773.577:62062): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839773.601:62063): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771839773.773:62064): pid=473403 uid=0 auid=1000 ses=223 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=473422 suid=1000 rport=43504 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771839773.774:62065): pid=473403 uid=0 auid=1000 ses=223 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=473422 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771839773.777:62066): pid=473403 uid=0 auid=1000 ses=223 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_DISP msg=audit(1771839773.778:62067): pid=473403 uid=0 auid=1000 ses=223 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771839773.778:62068): pid=473403 uid=0 auid=1000 ses=223 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=473403 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1771839778.175:62069): pid=474413 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=474413 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771839778.255:62070): pid=474412 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=474413 suid=74 rport=54088 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771839778.255:62071): pid=474412 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=474413 suid=74 rport=54088 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771839778.348:62072): pid=474412 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=474412 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771839778.348:62073): pid=474412 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771839780.461:62074): pid=474415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=474415 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771839780.541:62075): pid=474414 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=474415 suid=74 rport=16752 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=185.156.73.233 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771839780.542:62076): pid=474414 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=474415 suid=74 rport=16752 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=185.156.73.233 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771839781.244:62077): pid=474414 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=474415 suid=74 rport=16752 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=185.156.73.233 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771839781.245:62078): pid=474414 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=474415 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1771839781.245:62079): pid=474414 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=185.156.73.233 addr=185.156.73.233 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771839781.246:62080): pid=474414 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=474414 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771839781.246:62081): pid=474414 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=185.156.73.233 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839784.028:62082): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839786.024:62083): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839786.292:62084): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839790.031:62085): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839790.035:62086): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839790.039:62087): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839790.042:62088): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839790.046:62089): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839790.358:62090): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839790.394:62091): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839790.452:62092): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839790.547:62093): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839790.616:62094): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1771839796.809:62095): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839796.809:62096): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771839796.873:62097): pid=474595 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839796.874:62098): pid=474595 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839796.875:62099): pid=474595 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839796.880:62100): pid=474595 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839796.883:62101): pid=474595 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839796.883:62102): pid=474595 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839796.889:62103): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839796.889:62104): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839796.908:62105): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839796.908:62106): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771839796.965:62107): pid=474610 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839796.965:62108): pid=474610 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6365706861646D2E64343332396666306235383338396131633837343432376536666138636461646332353435303739313137633737343464643965646634613365346663383366202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839796.966:62109): pid=474610 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839796.969:62110): pid=474610 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839797.610:62111): pid=474610 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839797.611:62112): pid=474610 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839797.732:62113): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839797.732:62114): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839802.457:62115): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839802.457:62116): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771839802.518:62117): pid=474658 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839802.518:62118): pid=474658 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839802.519:62119): pid=474658 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839802.522:62120): pid=474658 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839802.526:62121): pid=474658 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839802.526:62122): pid=474658 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839802.530:62123): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839802.531:62124): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1771839804.029:62125): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839804.033:62126): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839804.188:62127): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839804.270:62128): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1771839805.197:62129): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839805.197:62130): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771839805.259:62131): pid=474717 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839805.260:62132): pid=474717 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839805.260:62133): pid=474717 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839805.264:62134): pid=474717 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839805.266:62135): pid=474717 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839805.267:62136): pid=474717 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839805.271:62137): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839805.271:62138): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839805.274:62139): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839805.274:62140): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771839805.333:62141): pid=474732 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839805.333:62142): pid=474732 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=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 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839805.334:62143): pid=474732 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839805.336:62144): pid=474732 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=BPF msg=audit(1771839814.833:62145): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1771839815.332:62146): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ceph-f1fea371-cb69-578d-a3d0-b5c472a84b46@mds.mds.np0005626461.jyrtpf comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1771839815.680:62147): prog-id=2325 op=LOAD
type=BPF msg=audit(1771839815.680:62148): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771839815.684:62149): prog-id=2326 op=LOAD
type=BPF msg=audit(1771839815.684:62150): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771839815.684:62151): prog-id=2327 op=LOAD
type=BPF msg=audit(1771839815.684:62152): prog-id=2328 op=LOAD
type=BPF msg=audit(1771839815.684:62153): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771839815.684:62154): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771839815.688:62155): prog-id=2329 op=LOAD
type=BPF msg=audit(1771839815.688:62156): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771839815.688:62157): prog-id=2330 op=LOAD
type=BPF msg=audit(1771839815.688:62158): prog-id=2331 op=LOAD
type=BPF msg=audit(1771839815.688:62159): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771839815.688:62160): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771839815.695:62161): prog-id=2332 op=LOAD
type=BPF msg=audit(1771839815.695:62162): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771839815.697:62163): prog-id=2333 op=LOAD
type=BPF msg=audit(1771839815.697:62164): prog-id=2334 op=LOAD
type=BPF msg=audit(1771839815.697:62165): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771839815.697:62166): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1771839815.749:62167): pid=474732 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839815.749:62168): pid=474732 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839815.755:62169): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839815.755:62170): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1771839817.026:62171): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839817.288:62172): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839820.395:62173): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839820.401:62174): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839820.511:62175): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839820.606:62176): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839820.631:62177): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839820.644:62178): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839820.854:62179): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839820.928:62180): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839820.993:62181): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839821.074:62182): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1771839822.276:62183): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839822.276:62184): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771839822.348:62185): pid=475121 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839822.349:62186): pid=475121 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839822.349:62187): pid=475121 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839822.354:62188): pid=475121 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839822.358:62189): pid=475121 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839822.359:62190): pid=475121 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839822.363:62191): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839822.363:62192): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839822.613:62193): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839822.613:62194): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771839822.682:62195): pid=475136 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839822.683:62196): pid=475136 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839822.685:62197): pid=475136 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839822.688:62198): pid=475136 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839822.691:62199): pid=475136 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839822.692:62200): pid=475136 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839822.696:62201): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839822.696:62202): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839822.699:62203): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839822.699:62204): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771839822.759:62205): pid=475151 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839822.760:62206): pid=475151 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6365706861646D2E64343332396666306235383338396131633837343432376536666138636461646332353435303739313137633737343464643965646634613365346663383366202D2D696D6167652072656769737472792E7265646861742E696F2F7268636570682F7268636570682D372D7268656C393A6C6174657374202D2D74696D656F757420383935206C73 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839822.760:62207): pid=475151 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839822.763:62208): pid=475151 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839824.170:62209): pid=475151 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839824.171:62210): pid=475151 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839824.176:62211): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839824.176:62212): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839824.387:62213): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839824.387:62214): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771839824.447:62215): pid=475310 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839824.448:62216): pid=475310 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839824.448:62217): pid=475310 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839824.453:62218): pid=475310 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839824.457:62219): pid=475310 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839824.457:62220): pid=475310 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839824.461:62221): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839824.461:62222): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839824.886:62223): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839824.886:62224): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771839824.940:62225): pid=475325 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839824.940:62226): pid=475325 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839824.941:62227): pid=475325 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839824.943:62228): pid=475325 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839824.946:62229): pid=475325 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839824.946:62230): pid=475325 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839824.951:62231): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839824.951:62232): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839830.178:62233): pid=475342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=475342 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771839830.266:62234): pid=475341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=475342 suid=74 rport=39836 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771839830.266:62235): pid=475341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=475342 suid=74 rport=39836 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771839830.370:62236): pid=475341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=475341 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771839830.371:62237): pid=475341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771839833.106:62238): pid=475344 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=475344 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771839833.188:62239): pid=475343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=475344 suid=74 rport=48804 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771839833.188:62240): pid=475343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=475344 suid=74 rport=48804 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771839833.281:62241): pid=475343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=475343 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771839833.281:62242): pid=475343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839835.033:62243): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839835.036:62244): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839835.236:62245): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839835.292:62246): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1771839846.628:62247): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839846.628:62248): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771839846.696:62249): pid=475390 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839846.696:62250): pid=475390 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839846.698:62251): pid=475390 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839846.701:62252): pid=475390 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839846.704:62253): pid=475390 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839846.705:62254): pid=475390 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839846.709:62255): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839846.709:62256): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1771839848.030:62257): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839848.290:62258): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1771839848.500:62259): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839848.500:62260): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771839848.559:62261): pid=475436 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839848.559:62262): pid=475436 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839848.560:62263): pid=475436 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839848.564:62264): pid=475436 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839848.569:62265): pid=475436 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839848.569:62266): pid=475436 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839848.573:62267): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839848.573:62268): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839849.728:62269): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839849.728:62270): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771839849.780:62271): pid=475451 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839849.781:62272): pid=475451 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839849.781:62273): pid=475451 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839849.784:62274): pid=475451 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839849.787:62275): pid=475451 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839849.787:62276): pid=475451 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839849.791:62277): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839849.791:62278): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1771839851.026:62279): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839851.030:62280): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839851.033:62281): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839851.037:62282): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839851.164:62283): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839851.319:62284): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839851.375:62285): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839851.439:62286): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839851.460:62287): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839851.501:62288): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1771839857.702:62289): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839857.702:62290): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771839857.764:62291): pid=475607 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839857.764:62292): pid=475607 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839857.765:62293): pid=475607 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839857.769:62294): pid=475607 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839857.772:62295): pid=475607 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839857.772:62296): pid=475607 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839857.776:62297): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839857.776:62298): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839858.052:62299): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839858.052:62300): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771839858.112:62301): pid=475622 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839858.112:62302): pid=475622 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839858.112:62303): pid=475622 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839858.115:62304): pid=475622 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839858.117:62305): pid=475622 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839858.117:62306): pid=475622 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839858.120:62307): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839858.120:62308): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839858.125:62309): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839858.125:62310): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771839858.185:62311): pid=475637 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839858.185:62312): pid=475637 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6365706861646D2E64343332396666306235383338396131633837343432376536666138636461646332353435303739313137633737343464643965646634613365346663383366202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839858.185:62313): pid=475637 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839858.188:62314): pid=475637 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839858.850:62315): pid=475637 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839858.851:62316): pid=475637 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839858.921:62317): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839858.921:62318): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839860.693:62319): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839860.693:62320): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771839860.762:62321): pid=475687 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839860.763:62322): pid=475687 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839860.764:62323): pid=475687 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839860.770:62324): pid=475687 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839860.775:62325): pid=475687 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839860.775:62326): pid=475687 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839860.779:62327): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839860.779:62328): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839861.191:62329): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839861.191:62330): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771839861.251:62331): pid=475702 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839861.251:62332): pid=475702 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839861.252:62333): pid=475702 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839861.254:62334): pid=475702 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839861.257:62335): pid=475702 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839861.258:62336): pid=475702 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839861.262:62337): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839861.262:62338): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839865.118:62339): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839865.118:62340): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771839865.181:62341): pid=475717 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839865.182:62342): pid=475717 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839865.182:62343): pid=475717 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839865.185:62344): pid=475717 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839865.189:62345): pid=475717 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839865.189:62346): pid=475717 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839865.193:62347): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839865.193:62348): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1771839866.031:62349): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839866.036:62350): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839866.268:62351): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839866.298:62352): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839879.023:62353): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839879.279:62354): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839882.039:62355): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839882.042:62356): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839882.046:62357): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839882.049:62358): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839882.053:62359): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839882.393:62360): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839882.457:62361): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839882.479:62362): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839882.509:62363): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839882.873:62364): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1771839883.739:62365): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839883.739:62366): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771839883.803:62367): pid=475986 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839883.803:62368): pid=475986 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839883.805:62369): pid=475986 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839883.810:62370): pid=475986 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839883.813:62371): pid=475986 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839883.813:62372): pid=475986 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839883.818:62373): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839883.818:62374): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839886.499:62375): pid=476002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=476002 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771839886.587:62376): pid=476001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=476002 suid=74 rport=33092 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771839886.587:62377): pid=476001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=476002 suid=74 rport=33092 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771839886.686:62378): pid=476001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=476001 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771839886.686:62379): pid=476001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771839888.045:62380): pid=476004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=476004 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771839888.046:62381): pid=476003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=476004 suid=74 rport=39412 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771839888.046:62382): pid=476003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=476004 suid=74 rport=39412 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771839888.302:62383): pid=476003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=476003 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771839888.303:62384): pid=476003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1771839888.805:62385): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839888.805:62386): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771839888.870:62387): pid=476005 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839888.870:62388): pid=476005 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F6574632F63657068 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839888.871:62389): pid=476005 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839888.874:62390): pid=476005 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839888.879:62391): pid=476005 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839888.879:62392): pid=476005 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839888.886:62393): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839888.886:62394): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839888.893:62395): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839888.893:62396): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771839888.962:62397): pid=476020 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839888.963:62398): pid=476020 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6574632F63657068 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839888.963:62399): pid=476020 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839888.965:62400): pid=476020 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839888.969:62401): pid=476020 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839888.969:62402): pid=476020 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839888.973:62403): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839888.973:62404): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839888.976:62405): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839888.976:62406): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771839889.031:62407): pid=476035 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839889.031:62408): pid=476035 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=746F756368202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839889.032:62409): pid=476035 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839889.034:62410): pid=476035 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839889.038:62411): pid=476035 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839889.038:62412): pid=476035 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839889.041:62413): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839889.041:62414): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839889.048:62415): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839889.048:62416): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771839889.098:62417): pid=476050 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839889.098:62418): pid=476050 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220636570682D61646D696E202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D623563343732613834623436 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839889.099:62419): pid=476050 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839889.101:62420): pid=476050 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839889.104:62421): pid=476050 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839889.104:62422): pid=476050 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839889.109:62423): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839889.109:62424): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839889.115:62425): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839889.115:62426): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771839889.169:62427): pid=476065 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839889.170:62428): pid=476065 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839889.170:62429): pid=476065 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839889.172:62430): pid=476065 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839889.175:62431): pid=476065 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839889.175:62432): pid=476065 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839889.179:62433): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839889.179:62434): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839889.183:62435): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839889.183:62436): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_END msg=audit(1771839889.236:62437): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839889.236:62438): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839889.240:62439): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839889.240:62440): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771839889.297:62441): pid=476093 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839889.297:62442): pid=476093 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220303A30202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839889.298:62443): pid=476093 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839889.300:62444): pid=476093 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839889.304:62445): pid=476093 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839889.305:62446): pid=476093 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839889.308:62447): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839889.308:62448): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839889.310:62449): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839889.310:62450): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771839889.368:62451): pid=476108 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839889.368:62452): pid=476108 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839889.369:62453): pid=476108 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839889.371:62454): pid=476108 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839889.373:62455): pid=476108 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839889.374:62456): pid=476108 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839889.378:62457): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839889.378:62458): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839889.382:62459): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839889.382:62460): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771839889.442:62461): pid=476123 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839889.442:62462): pid=476123 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D76202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6574632F636570682F636570682E636F6E662E6E6577202F6574632F636570682F636570682E636F6E66 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839889.443:62463): pid=476123 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839889.446:62464): pid=476123 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839889.449:62465): pid=476123 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839889.449:62466): pid=476123 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839889.454:62467): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839889.454:62468): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839889.457:62469): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839889.457:62470): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771839889.515:62471): pid=476138 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839889.515:62472): pid=476138 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E666967 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839889.515:62473): pid=476138 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839889.518:62474): pid=476138 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839889.520:62475): pid=476138 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839889.521:62476): pid=476138 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839889.526:62477): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839889.526:62478): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839889.530:62479): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839889.530:62480): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771839889.589:62481): pid=476153 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839889.589:62482): pid=476153 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E666967 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839889.590:62483): pid=476153 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839889.592:62484): pid=476153 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839889.595:62485): pid=476153 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839889.596:62486): pid=476153 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839889.602:62487): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839889.602:62488): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839889.606:62489): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839889.606:62490): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771839889.665:62491): pid=476168 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839889.666:62492): pid=476168 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=746F756368202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839889.666:62493): pid=476168 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839889.669:62494): pid=476168 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839889.672:62495): pid=476168 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839889.672:62496): pid=476168 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839889.677:62497): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839889.677:62498): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839889.681:62499): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839889.681:62500): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771839889.740:62501): pid=476183 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839889.742:62502): pid=476183 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220636570682D61646D696E202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D623563343732613834623436 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839889.742:62503): pid=476183 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839889.745:62504): pid=476183 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839889.749:62505): pid=476183 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839889.749:62506): pid=476183 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839889.754:62507): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839889.754:62508): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839889.757:62509): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839889.757:62510): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771839889.818:62511): pid=476198 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839889.818:62512): pid=476198 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839889.819:62513): pid=476198 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839889.822:62514): pid=476198 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839889.824:62515): pid=476198 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839889.825:62516): pid=476198 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839889.829:62517): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839889.829:62518): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839889.833:62519): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839889.833:62520): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_END msg=audit(1771839889.888:62521): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839889.888:62522): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839889.892:62523): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839889.892:62524): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771839889.953:62525): pid=476226 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839889.954:62526): pid=476226 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220303A30202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839889.954:62527): pid=476226 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839889.957:62528): pid=476226 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839889.964:62529): pid=476226 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839889.964:62530): pid=476226 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839889.967:62531): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839889.967:62532): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839889.969:62533): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839889.969:62534): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771839890.035:62535): pid=476241 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839890.035:62536): pid=476241 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839890.035:62537): pid=476241 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839890.038:62538): pid=476241 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839890.041:62539): pid=476241 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839890.041:62540): pid=476241 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839890.045:62541): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839890.045:62542): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839890.047:62543): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839890.047:62544): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771839890.110:62545): pid=476256 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839890.110:62546): pid=476256 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D76202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E6669672F636570682E636F6E662E6E6577202F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E6669672F636570682E636F6E66 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839890.111:62547): pid=476256 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839890.114:62548): pid=476256 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839890.117:62549): pid=476256 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839890.118:62550): pid=476256 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839890.121:62551): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839890.121:62552): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839891.491:62553): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839891.491:62554): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1771839891.558:62555): pid=476271 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839891.559:62556): pid=476271 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839891.559:62557): pid=476271 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839891.562:62558): pid=476271 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839891.566:62559): pid=476271 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839891.566:62560): pid=476271 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839891.570:62561): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839891.570:62562): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1771839897.027:62563): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839897.031:62564): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771839897.128:62565): pid=26123 uid=0 auid=1002 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26126 suid=1002 rport=37874 laddr=192.168.122.105 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839897.128:62566): pid=26104 uid=0 auid=1002 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26107 suid=1002 rport=37858 laddr=192.168.122.105 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839897.128:62567): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26181 suid=1002 rport=40162 laddr=192.168.122.105 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839897.128:62568): pid=26142 uid=0 auid=1002 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26145 suid=1002 rport=40140 laddr=192.168.122.105 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839897.128:62569): pid=25967 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25989 suid=1002 rport=37814 laddr=192.168.122.105 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839897.128:62570): pid=26047 uid=0 auid=1002 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26050 suid=1002 rport=37842 laddr=192.168.122.105 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839897.128:62571): pid=26066 uid=0 auid=1002 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26069 suid=1002 rport=37846 laddr=192.168.122.105 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839897.128:62572): pid=26085 uid=0 auid=1002 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26088 suid=1002 rport=37856 laddr=192.168.122.105 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839897.129:62573): pid=26028 uid=0 auid=1002 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26031 suid=1002 rport=37840 laddr=192.168.122.105 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839897.129:62574): pid=26159 uid=0 auid=1002 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26162 suid=1002 rport=40146 laddr=192.168.122.105 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839897.129:62575): pid=25985 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25993 suid=1002 rport=37826 laddr=192.168.122.105 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839897.131:62576): pid=26009 uid=0 auid=1002 ses=17 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26012 suid=1002 rport=37832 laddr=192.168.122.105 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_END msg=audit(1771839897.136:62577): pid=25967 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.103 addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839897.137:62578): pid=25967 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.103 addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=USER_END msg=audit(1771839897.137:62579): pid=26066 uid=0 auid=1002 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.103 addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=USER_END msg=audit(1771839897.138:62580): pid=26009 uid=0 auid=1002 ses=17 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.103 addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839897.138:62581): pid=26066 uid=0 auid=1002 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.103 addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839897.138:62582): pid=26009 uid=0 auid=1002 ses=17 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.103 addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=USER_END msg=audit(1771839897.138:62583): pid=26028 uid=0 auid=1002 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.103 addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839897.139:62584): pid=26028 uid=0 auid=1002 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.103 addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=USER_END msg=audit(1771839897.139:62585): pid=26159 uid=0 auid=1002 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.103 addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839897.139:62586): pid=26159 uid=0 auid=1002 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.103 addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=USER_END msg=audit(1771839897.142:62587): pid=26142 uid=0 auid=1002 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.103 addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=USER_END msg=audit(1771839897.142:62588): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.103 addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839897.142:62589): pid=26142 uid=0 auid=1002 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.103 addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=USER_END msg=audit(1771839897.142:62590): pid=26104 uid=0 auid=1002 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.103 addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839897.143:62591): pid=26178 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.103 addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839897.143:62592): pid=26104 uid=0 auid=1002 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.103 addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=USER_END msg=audit(1771839897.145:62593): pid=26123 uid=0 auid=1002 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.103 addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839897.146:62594): pid=26123 uid=0 auid=1002 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.103 addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=USER_END msg=audit(1771839897.154:62595): pid=25985 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.103 addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839897.154:62596): pid=25985 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.103 addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=USER_END msg=audit(1771839897.169:62597): pid=26085 uid=0 auid=1002 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.103 addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839897.170:62598): pid=26085 uid=0 auid=1002 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.103 addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=USER_END msg=audit(1771839897.203:62599): pid=26047 uid=0 auid=1002 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.103 addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839897.203:62600): pid=26047 uid=0 auid=1002 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.103 addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=SERVICE_STOP msg=audit(1771839897.253:62601): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839897.305:62602): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771839897.524:62603): pid=476475 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=476475 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771839897.526:62604): pid=476474 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=476475 suid=74 rport=56152 laddr=192.168.122.105 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771839897.526:62605): pid=476474 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=476475 suid=74 rport=56152 laddr=192.168.122.105 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1771839897.560:62606): pid=476474 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="ceph-admin" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771839897.560:62607): pid=476474 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:5d:af:d5:32:45:ed:07:be:e7:1f:3e:5d:df:71:a9:73:54:8f:8e:fa:d2:85:b6:d3:b6:a1:f0:02:d2:3b:bc:9a exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1771839897.591:62608): pid=476474 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.105 addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771839897.592:62609): pid=476474 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=476475 suid=74 rport=56152 laddr=192.168.122.105 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1771839897.594:62610): pid=476474 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.105 addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1771839897.594:62611): pid=476474 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1002 tty=(none) old-ses=4294967295 ses=225 res=1UID="root" OLD-AUID="unset" AUID="ceph-admin"
type=SYSCALL msg=audit(1771839897.594:62611): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7fff203f7630 a2=4 a3=3ea items=0 ppid=416325 pid=476474 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=225 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="ceph-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1771839897.594:62611): proctitle=737368643A20636570682D61646D696E205B707269765D
type=USER_ROLE_CHANGE msg=audit(1771839897.596:62612): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.105 addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=USER_START msg=audit(1771839897.629:62613): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.105 addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839897.630:62614): pid=476477 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=476477 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="root"
type=CRED_ACQ msg=audit(1771839897.632:62615): pid=476477 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.105 addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=USER_LOGIN msg=audit(1771839897.675:62616): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839897.675:62617): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839897.677:62618): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=476478 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839897.750:62619): pid=476478 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839897.750:62620): pid=476478 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839897.753:62621): pid=476478 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839897.759:62622): pid=476478 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839897.762:62623): pid=476478 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839897.763:62624): pid=476478 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839897.766:62625): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839897.767:62626): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839897.769:62627): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839897.769:62628): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839897.771:62629): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=476493 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839897.835:62630): pid=476493 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839897.835:62631): pid=476493 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6365706861646D2E64343332396666306235383338396131633837343432376536666138636461646332353435303739313137633737343464643965646634613365346663383366202D2D696D6167652072656769737472792E7265646861742E696F2F7268636570682F7268636570682D372D7268656C393A6C6174657374202D2D74696D656F757420383935206C73 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839897.836:62632): pid=476493 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839897.839:62633): pid=476493 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839900.315:62634): pid=476493 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839900.315:62635): pid=476493 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839900.320:62636): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839900.321:62637): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839900.405:62638): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839900.405:62639): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839900.407:62640): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=476682 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839900.467:62641): pid=476682 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839900.467:62642): pid=476682 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839900.468:62643): pid=476682 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839900.474:62644): pid=476682 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839900.476:62645): pid=476682 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839900.477:62646): pid=476682 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839900.481:62647): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839900.481:62648): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839900.484:62649): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839900.484:62650): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839900.485:62651): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=476697 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839900.546:62652): pid=476697 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839900.546:62653): pid=476697 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6365706861646D2E64343332396666306235383338396131633837343432376536666138636461646332353435303739313137633737343464643965646634613365346663383366202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839900.547:62654): pid=476697 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839900.549:62655): pid=476697 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839901.244:62656): pid=476697 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839901.244:62657): pid=476697 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839901.262:62658): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839901.263:62659): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839901.265:62660): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839901.266:62661): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839901.267:62662): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=476744 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839901.330:62663): pid=476744 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839901.330:62664): pid=476744 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839901.331:62665): pid=476744 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839901.334:62666): pid=476744 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839901.337:62667): pid=476744 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839901.337:62668): pid=476744 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839901.341:62669): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839901.341:62670): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839901.344:62671): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839901.344:62672): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839901.345:62673): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=476759 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839901.406:62674): pid=476759 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839901.407:62675): pid=476759 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6365706861646D2E64343332396666306235383338396131633837343432376536666138636461646332353435303739313137633737343464643965646634613365346663383366202D2D696D6167652072656769737472792E7265646861742E696F2F7268636570682F7268636570682D372D7268656C393A6C6174657374202D2D74696D656F757420383935206C6973742D6E6574776F726B73 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839901.407:62676): pid=476759 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839901.410:62677): pid=476759 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839901.908:62678): pid=476759 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839901.908:62679): pid=476759 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839901.913:62680): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839901.913:62681): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839902.069:62682): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839902.069:62683): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839902.071:62684): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=476795 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839902.141:62685): pid=476795 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839902.141:62686): pid=476795 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F6574632F63657068 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839902.142:62687): pid=476795 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839902.145:62688): pid=476795 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839902.149:62689): pid=476795 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839902.149:62690): pid=476795 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839902.158:62691): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839902.158:62692): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839902.166:62693): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839902.166:62694): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839902.168:62695): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=476810 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839902.229:62696): pid=476810 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839902.229:62697): pid=476810 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6574632F63657068 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839902.230:62698): pid=476810 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839902.233:62699): pid=476810 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839902.237:62700): pid=476810 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839902.237:62701): pid=476810 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839902.246:62702): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839902.246:62703): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839902.258:62704): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839902.258:62705): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839902.260:62706): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=476825 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839902.321:62707): pid=476825 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839902.321:62708): pid=476825 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=746F756368202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839902.322:62709): pid=476825 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839902.326:62710): pid=476825 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839902.329:62711): pid=476825 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839902.330:62712): pid=476825 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839902.336:62713): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839902.336:62714): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839902.340:62715): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839902.340:62716): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839902.342:62717): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=476840 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839902.410:62718): pid=476840 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839902.410:62719): pid=476840 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220636570682D61646D696E202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D623563343732613834623436 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839902.411:62720): pid=476840 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839902.414:62721): pid=476840 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839902.418:62722): pid=476840 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839902.419:62723): pid=476840 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839902.425:62724): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839902.425:62725): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839902.432:62726): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839902.432:62727): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839902.434:62728): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=476855 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839902.501:62729): pid=476855 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839902.502:62730): pid=476855 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839902.503:62731): pid=476855 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839902.507:62732): pid=476855 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839902.510:62733): pid=476855 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839902.511:62734): pid=476855 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839902.517:62735): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839902.517:62736): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839902.526:62737): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839902.526:62738): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839902.528:62739): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=476870 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_END msg=audit(1771839902.577:62740): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839902.577:62741): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839902.579:62742): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839902.579:62743): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839902.580:62744): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=476883 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839902.645:62745): pid=476883 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839902.646:62746): pid=476883 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220303A30202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839902.647:62747): pid=476883 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839902.649:62748): pid=476883 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839902.655:62749): pid=476883 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839902.656:62750): pid=476883 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839902.659:62751): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839902.659:62752): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839902.661:62753): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839902.661:62754): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839902.662:62755): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=476898 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839902.723:62756): pid=476898 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839902.723:62757): pid=476898 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839902.724:62758): pid=476898 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839902.727:62759): pid=476898 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839902.729:62760): pid=476898 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839902.730:62761): pid=476898 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839902.735:62762): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839902.735:62763): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839902.740:62764): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839902.740:62765): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839902.742:62766): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=476913 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839902.805:62767): pid=476913 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839902.806:62768): pid=476913 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D76202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6574632F636570682F636570682E636F6E662E6E6577202F6574632F636570682F636570682E636F6E66 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839902.806:62769): pid=476913 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839902.809:62770): pid=476913 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839902.813:62771): pid=476913 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839902.814:62772): pid=476913 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839902.819:62773): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839902.819:62774): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839902.830:62775): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839902.830:62776): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839902.832:62777): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=476928 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839902.892:62778): pid=476928 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839902.892:62779): pid=476928 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E666967 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839902.893:62780): pid=476928 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839902.896:62781): pid=476928 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839902.899:62782): pid=476928 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839902.900:62783): pid=476928 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839902.905:62784): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839902.905:62785): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839902.910:62786): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839902.911:62787): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839902.912:62788): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=476943 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839902.977:62789): pid=476943 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839902.977:62790): pid=476943 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E666967 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839902.978:62791): pid=476943 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839902.982:62792): pid=476943 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839902.987:62793): pid=476943 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839902.988:62794): pid=476943 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839902.993:62795): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839902.993:62796): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839902.996:62797): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839902.996:62798): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839902.997:62799): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=476958 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839903.053:62800): pid=476958 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839903.054:62801): pid=476958 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=746F756368202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839903.054:62802): pid=476958 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839903.056:62803): pid=476958 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839903.059:62804): pid=476958 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839903.059:62805): pid=476958 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839903.064:62806): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839903.064:62807): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839903.071:62808): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839903.071:62809): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839903.072:62810): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=476973 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839903.122:62811): pid=476973 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839903.122:62812): pid=476973 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220636570682D61646D696E202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D623563343732613834623436 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839903.123:62813): pid=476973 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839903.126:62814): pid=476973 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839903.128:62815): pid=476973 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839903.128:62816): pid=476973 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839903.133:62817): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839903.133:62818): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839903.135:62819): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839903.135:62820): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839903.137:62821): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=476988 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839903.192:62822): pid=476988 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839903.192:62823): pid=476988 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839903.193:62824): pid=476988 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839903.195:62825): pid=476988 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839903.198:62826): pid=476988 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839903.198:62827): pid=476988 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839903.208:62828): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839903.208:62829): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839903.215:62830): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839903.215:62831): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839903.217:62832): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=477003 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_END msg=audit(1771839903.270:62833): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839903.270:62834): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839903.271:62835): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839903.271:62836): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839903.273:62837): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=477016 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839903.335:62838): pid=477016 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839903.336:62839): pid=477016 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220303A30202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839903.336:62840): pid=477016 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839903.339:62841): pid=477016 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839903.346:62842): pid=477016 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839903.347:62843): pid=477016 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839903.350:62844): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839903.350:62845): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839903.352:62846): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839903.352:62847): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839903.354:62848): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=477031 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839903.417:62849): pid=477031 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839903.417:62850): pid=477031 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839903.418:62851): pid=477031 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839903.420:62852): pid=477031 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839903.424:62853): pid=477031 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839903.424:62854): pid=477031 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839903.428:62855): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839903.428:62856): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839903.432:62857): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839903.432:62858): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839903.433:62859): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=477046 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839903.496:62860): pid=477046 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839903.496:62861): pid=477046 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D76202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E6669672F636570682E636F6E662E6E6577202F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E6669672F636570682E636F6E66 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839903.497:62862): pid=477046 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839903.500:62863): pid=477046 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839903.503:62864): pid=477046 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839903.504:62865): pid=477046 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839903.508:62866): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839903.509:62867): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839903.513:62868): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839903.513:62869): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839903.514:62870): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=477061 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839903.576:62871): pid=477061 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839903.577:62872): pid=477061 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F6574632F63657068 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839903.577:62873): pid=477061 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839903.580:62874): pid=477061 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839903.583:62875): pid=477061 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839903.583:62876): pid=477061 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839903.587:62877): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839903.587:62878): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839903.590:62879): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839903.590:62880): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839903.592:62881): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=477076 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839903.656:62882): pid=477076 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839903.657:62883): pid=477076 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6574632F63657068 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839903.657:62884): pid=477076 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839903.660:62885): pid=477076 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839903.663:62886): pid=477076 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839903.663:62887): pid=477076 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839903.668:62888): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839903.668:62889): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839903.671:62890): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839903.671:62891): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839903.672:62892): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=477091 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839903.732:62893): pid=477091 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839903.733:62894): pid=477091 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=746F756368202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6574632F636570682F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839903.733:62895): pid=477091 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839903.736:62896): pid=477091 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839903.739:62897): pid=477091 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839903.739:62898): pid=477091 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839903.743:62899): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839903.744:62900): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839903.746:62901): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839903.746:62902): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839903.748:62903): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=477106 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839903.811:62904): pid=477106 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839903.812:62905): pid=477106 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220636570682D61646D696E202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D623563343732613834623436 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839903.812:62906): pid=477106 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839903.815:62907): pid=477106 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839903.819:62908): pid=477106 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839903.820:62909): pid=477106 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839903.824:62910): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839903.824:62911): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839903.831:62912): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839903.831:62913): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839903.833:62914): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=477121 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839903.895:62915): pid=477121 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839903.896:62916): pid=477121 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6574632F636570682F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839903.896:62917): pid=477121 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839903.899:62918): pid=477121 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839903.902:62919): pid=477121 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839903.903:62920): pid=477121 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839903.908:62921): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839903.908:62922): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839903.912:62923): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839903.912:62924): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839903.913:62925): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=477136 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_END msg=audit(1771839903.957:62926): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839903.957:62927): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839903.959:62928): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839903.959:62929): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839903.960:62930): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=477149 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839904.020:62931): pid=477149 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839904.020:62932): pid=477149 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220303A30202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6574632F636570682F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839904.021:62933): pid=477149 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839904.024:62934): pid=477149 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839904.030:62935): pid=477149 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839904.030:62936): pid=477149 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839904.034:62937): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839904.034:62938): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839904.036:62939): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839904.036:62940): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839904.038:62941): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=477164 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839904.099:62942): pid=477164 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839904.099:62943): pid=477164 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363030202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6574632F636570682F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839904.100:62944): pid=477164 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839904.102:62945): pid=477164 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839904.105:62946): pid=477164 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839904.106:62947): pid=477164 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839904.113:62948): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839904.113:62949): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839904.120:62950): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839904.120:62951): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839904.121:62952): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=477179 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839904.183:62953): pid=477179 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839904.183:62954): pid=477179 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D76202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6574632F636570682F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577202F6574632F636570682F636570682E636C69656E742E61646D696E2E6B657972696E67 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839904.184:62955): pid=477179 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839904.187:62956): pid=477179 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839904.191:62957): pid=477179 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839904.191:62958): pid=477179 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839904.195:62959): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839904.195:62960): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839904.204:62961): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839904.205:62962): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839904.206:62963): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=477194 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839904.266:62964): pid=477194 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839904.266:62965): pid=477194 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E666967 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839904.267:62966): pid=477194 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839904.270:62967): pid=477194 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839904.273:62968): pid=477194 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839904.273:62969): pid=477194 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839904.276:62970): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839904.277:62971): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839904.278:62972): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839904.278:62973): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839904.280:62974): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=477209 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839904.346:62975): pid=477209 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839904.346:62976): pid=477209 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E666967 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839904.347:62977): pid=477209 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839904.350:62978): pid=477209 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839904.353:62979): pid=477209 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839904.354:62980): pid=477209 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839904.357:62981): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839904.357:62982): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839904.361:62983): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839904.361:62984): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839904.362:62985): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=477224 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839904.417:62986): pid=477224 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839904.417:62987): pid=477224 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=746F756368202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E6669672F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839904.418:62988): pid=477224 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839904.420:62989): pid=477224 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839904.422:62990): pid=477224 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839904.423:62991): pid=477224 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839904.429:62992): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839904.429:62993): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839904.437:62994): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839904.438:62995): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839904.439:62996): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=477239 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839904.501:62997): pid=477239 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839904.501:62998): pid=477239 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220636570682D61646D696E202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D623563343732613834623436 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839904.502:62999): pid=477239 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839904.504:63000): pid=477239 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839904.508:63001): pid=477239 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839904.508:63002): pid=477239 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839904.512:63003): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839904.512:63004): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839904.517:63005): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839904.517:63006): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839904.519:63007): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=477254 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839904.580:63008): pid=477254 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839904.580:63009): pid=477254 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E6669672F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839904.581:63010): pid=477254 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839904.584:63011): pid=477254 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839904.587:63012): pid=477254 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839904.587:63013): pid=477254 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839904.590:63014): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839904.591:63015): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839904.594:63016): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839904.594:63017): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839904.596:63018): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=477269 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_END msg=audit(1771839904.659:63019): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839904.659:63020): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839904.665:63021): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839904.665:63022): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839904.667:63023): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=477282 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839904.721:63024): pid=477282 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839904.721:63025): pid=477282 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220303A30202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E6669672F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839904.722:63026): pid=477282 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839904.724:63027): pid=477282 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839904.730:63028): pid=477282 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839904.731:63029): pid=477282 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839904.736:63030): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839904.736:63031): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839904.739:63032): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839904.739:63033): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839904.741:63034): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=477297 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839904.793:63035): pid=477297 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839904.794:63036): pid=477297 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363030202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E6669672F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839904.795:63037): pid=477297 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839904.798:63038): pid=477297 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839904.801:63039): pid=477297 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839904.801:63040): pid=477297 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839904.808:63041): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839904.808:63042): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839904.815:63043): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839904.815:63044): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839904.817:63045): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=477312 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839904.876:63046): pid=477312 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839904.876:63047): pid=477312 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D76202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E6669672F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577202F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E6669672F636570682E636C69656E742E61646D696E2E6B657972696E67 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839904.877:63048): pid=477312 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839904.880:63049): pid=477312 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839904.883:63050): pid=477312 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839904.883:63051): pid=477312 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839904.889:63052): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839904.889:63053): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839905.193:63054): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839905.193:63055): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839905.195:63056): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=477327 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839905.250:63057): pid=477327 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839905.250:63058): pid=477327 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839905.250:63059): pid=477327 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839905.253:63060): pid=477327 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839905.255:63061): pid=477327 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839905.256:63062): pid=477327 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839905.260:63063): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839905.260:63064): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839906.429:63065): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839906.430:63066): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839906.431:63067): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=477342 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839906.492:63068): pid=477342 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839906.492:63069): pid=477342 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839906.493:63070): pid=477342 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839906.495:63071): pid=477342 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839906.498:63072): pid=477342 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839906.498:63073): pid=477342 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839906.502:63074): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839906.502:63075): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839906.505:63076): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839906.505:63077): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839906.506:63078): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=477357 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839906.566:63079): pid=477357 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839906.566:63080): pid=477357 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=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 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839906.567:63081): pid=477357 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839906.569:63082): pid=477357 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=BPF msg=audit(1771839907.111:63083): prog-id=2335 op=LOAD
type=SYSCALL msg=audit(1771839907.111:63083): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffe082b90e0 a2=90 a3=9500000000 items=0 ppid=477406 pid=477407 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=225 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="ceph-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1771839907.111:63083): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F613532646165326261326263373664303438316138343030373863616233
type=BPF msg=audit(1771839907.164:63084): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1771839907.329:63085): pid=477357 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839907.329:63086): pid=477357 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839907.334:63087): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839907.334:63088): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839907.620:63089): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839907.620:63090): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839907.622:63091): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=477427 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839907.683:63092): pid=477427 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839907.684:63093): pid=477427 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839907.684:63094): pid=477427 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839907.688:63095): pid=477427 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839907.691:63096): pid=477427 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839907.691:63097): pid=477427 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839907.695:63098): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839907.695:63099): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839907.697:63100): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839907.698:63101): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839907.699:63102): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=477442 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839907.758:63103): pid=477442 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839907.759:63104): pid=477442 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6365706861646D2E64343332396666306235383338396131633837343432376536666138636461646332353435303739313137633737343464643965646634613365346663383366202D2D696D6167652072656769737472792E7265646861742E696F2F7268636570682F7268636570682D372D7268656C393A6C6174657374202D2D74696D656F757420383935205F6F726368206465706C6F79202D2D667369642066316665613337312D636236392D353738642D613364302D623563343732613834623436 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839907.759:63105): pid=477442 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839907.762:63106): pid=477442 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=BPF msg=audit(1771839908.248:63107): prog-id=2336 op=LOAD
type=SYSCALL msg=audit(1771839908.248:63107): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc1f0f9340 a2=90 a3=9500000000 items=0 ppid=477489 pid=477490 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=225 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="ceph-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1771839908.248:63107): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F666638353138643337363764663761613461366336613836616134653165
type=BPF msg=audit(1771839908.311:63108): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1771839908.498:63109): pid=477442 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839908.499:63110): pid=477442 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839908.503:63111): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839908.504:63112): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839908.558:63113): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839908.558:63114): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839908.560:63115): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=477511 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839908.618:63116): pid=477511 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839908.619:63117): pid=477511 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839908.619:63118): pid=477511 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839908.623:63119): pid=477511 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839908.625:63120): pid=477511 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839908.626:63121): pid=477511 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839908.630:63122): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839908.630:63123): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839908.633:63124): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839908.633:63125): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839908.634:63126): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=477526 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839908.690:63127): pid=477526 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839908.690:63128): pid=477526 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=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 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839908.691:63129): pid=477526 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839908.693:63130): pid=477526 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=BPF msg=audit(1771839909.197:63131): prog-id=2337 op=LOAD
type=SYSCALL msg=audit(1771839909.197:63131): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc9ac6fc30 a2=90 a3=9500000000 items=0 ppid=477575 pid=477576 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=225 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="ceph-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1771839909.197:63131): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F633739313861626565333138633831373763373433366137653034313439
type=BPF msg=audit(1771839909.239:63132): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1771839909.308:63133): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1771839909.396:63134): pid=477526 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839909.396:63135): pid=477526 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839909.401:63136): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839909.401:63137): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_STOP msg=audit(1771839909.543:63138): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839913.030:63139): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839913.034:63140): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839913.038:63141): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839913.041:63142): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839913.045:63143): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839913.382:63144): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839913.410:63145): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839913.424:63146): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839913.480:63147): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839913.481:63148): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839928.027:63149): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839928.032:63150): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839928.218:63151): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839928.243:63152): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1771839933.040:63153): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839933.040:63154): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839933.043:63155): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=477819 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839933.108:63156): pid=477819 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839933.109:63157): pid=477819 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F6574632F63657068 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839933.110:63158): pid=477819 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839933.116:63159): pid=477819 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839933.120:63160): pid=477819 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839933.120:63161): pid=477819 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839933.127:63162): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839933.127:63163): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839933.139:63164): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839933.139:63165): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839933.140:63166): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=477834 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839933.195:63167): pid=477834 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839933.195:63168): pid=477834 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6574632F63657068 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839933.195:63169): pid=477834 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839933.197:63170): pid=477834 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839933.201:63171): pid=477834 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839933.201:63172): pid=477834 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839933.205:63173): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839933.205:63174): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839933.208:63175): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839933.208:63176): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839933.210:63177): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=477849 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839933.273:63178): pid=477849 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839933.273:63179): pid=477849 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=746F756368202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839933.274:63180): pid=477849 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839933.277:63181): pid=477849 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839933.280:63182): pid=477849 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839933.280:63183): pid=477849 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839933.285:63184): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839933.285:63185): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839933.288:63186): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839933.288:63187): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839933.290:63188): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=477864 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839933.342:63189): pid=477864 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839933.342:63190): pid=477864 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220636570682D61646D696E202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D623563343732613834623436 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839933.343:63191): pid=477864 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839933.346:63192): pid=477864 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839933.348:63193): pid=477864 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839933.349:63194): pid=477864 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839933.353:63195): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839933.353:63196): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839933.356:63197): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839933.356:63198): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839933.358:63199): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=477879 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839933.406:63200): pid=477879 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839933.407:63201): pid=477879 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839933.407:63202): pid=477879 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839933.410:63203): pid=477879 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839933.412:63204): pid=477879 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839933.412:63205): pid=477879 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839933.416:63206): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839933.416:63207): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839933.422:63208): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839933.423:63209): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839933.424:63210): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=477894 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_END msg=audit(1771839933.486:63211): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839933.486:63212): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839933.493:63213): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839933.493:63214): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839933.494:63215): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=477907 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839933.554:63216): pid=477907 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839933.554:63217): pid=477907 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220303A30202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839933.555:63218): pid=477907 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839933.557:63219): pid=477907 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839933.562:63220): pid=477907 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839933.562:63221): pid=477907 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839933.566:63222): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839933.566:63223): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839933.575:63224): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839933.575:63225): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839933.576:63226): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=477922 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839933.635:63227): pid=477922 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839933.635:63228): pid=477922 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839933.636:63229): pid=477922 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839933.639:63230): pid=477922 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839933.642:63231): pid=477922 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839933.642:63232): pid=477922 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839933.646:63233): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839933.646:63234): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839933.651:63235): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839933.651:63236): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839933.652:63237): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=477937 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839933.713:63238): pid=477937 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839933.713:63239): pid=477937 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D76202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6574632F636570682F636570682E636F6E662E6E6577202F6574632F636570682F636570682E636F6E66 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839933.714:63240): pid=477937 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839933.716:63241): pid=477937 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839933.720:63242): pid=477937 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839933.720:63243): pid=477937 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839933.725:63244): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839933.725:63245): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839933.731:63246): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839933.731:63247): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839933.732:63248): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=477952 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839933.794:63249): pid=477952 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839933.795:63250): pid=477952 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E666967 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839933.795:63251): pid=477952 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839933.798:63252): pid=477952 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839933.802:63253): pid=477952 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839933.802:63254): pid=477952 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839933.806:63255): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839933.806:63256): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839933.810:63257): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839933.811:63258): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839933.812:63259): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=477967 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839933.874:63260): pid=477967 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839933.874:63261): pid=477967 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E666967 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839933.875:63262): pid=477967 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839933.878:63263): pid=477967 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839933.881:63264): pid=477967 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839933.881:63265): pid=477967 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839933.885:63266): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839933.885:63267): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839933.890:63268): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839933.891:63269): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839933.892:63270): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=477982 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839933.953:63271): pid=477982 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839933.953:63272): pid=477982 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=746F756368202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839933.954:63273): pid=477982 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839933.956:63274): pid=477982 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839933.959:63275): pid=477982 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839933.960:63276): pid=477982 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839933.964:63277): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839933.964:63278): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839933.968:63279): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839933.968:63280): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839933.970:63281): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=477997 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839934.034:63282): pid=477997 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839934.034:63283): pid=477997 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220636570682D61646D696E202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D623563343732613834623436 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839934.035:63284): pid=477997 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839934.038:63285): pid=477997 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839934.042:63286): pid=477997 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839934.043:63287): pid=477997 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839934.047:63288): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839934.047:63289): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839934.049:63290): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839934.049:63291): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839934.051:63292): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=478012 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839934.112:63293): pid=478012 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839934.112:63294): pid=478012 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839934.113:63295): pid=478012 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839934.116:63296): pid=478012 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839934.119:63297): pid=478012 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839934.119:63298): pid=478012 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839934.127:63299): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839934.127:63300): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839934.134:63301): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839934.134:63302): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839934.136:63303): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=478027 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_END msg=audit(1771839934.178:63304): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839934.178:63305): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839934.179:63306): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839934.180:63307): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839934.181:63308): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=478040 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839934.244:63309): pid=478040 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839934.244:63310): pid=478040 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220303A30202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839934.245:63311): pid=478040 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839934.247:63312): pid=478040 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839934.254:63313): pid=478040 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839934.254:63314): pid=478040 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839934.257:63315): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839934.258:63316): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839934.261:63317): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839934.262:63318): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839934.263:63319): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=478055 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839934.328:63320): pid=478055 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839934.328:63321): pid=478055 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839934.329:63322): pid=478055 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839934.332:63323): pid=478055 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839934.335:63324): pid=478055 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839934.335:63325): pid=478055 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839934.342:63326): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839934.342:63327): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839934.346:63328): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839934.346:63329): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839934.348:63330): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=478070 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839934.402:63331): pid=478070 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839934.403:63332): pid=478070 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D76202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E6669672F636570682E636F6E662E6E6577202F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E6669672F636570682E636F6E66 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839934.403:63333): pid=478070 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839934.406:63334): pid=478070 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839934.409:63335): pid=478070 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839934.409:63336): pid=478070 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839934.413:63337): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839934.414:63338): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839937.555:63339): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839937.555:63340): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839937.556:63341): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=478085 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839937.620:63342): pid=478085 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839937.620:63343): pid=478085 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839937.621:63344): pid=478085 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839937.623:63345): pid=478085 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839937.627:63346): pid=478085 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839937.627:63347): pid=478085 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839937.631:63348): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839937.631:63349): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839938.002:63350): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839938.002:63351): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839938.003:63352): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=478100 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839938.063:63353): pid=478100 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839938.064:63354): pid=478100 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839938.064:63355): pid=478100 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839938.067:63356): pid=478100 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839938.070:63357): pid=478100 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839938.070:63358): pid=478100 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839938.074:63359): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839938.074:63360): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1771839940.026:63361): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839940.289:63362): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771839940.566:63363): pid=478159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=478159 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771839940.692:63364): pid=478155 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=478159 suid=74 rport=38698 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=80.94.92.182 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771839940.692:63365): pid=478155 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=478159 suid=74 rport=38698 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=80.94.92.182 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_LOGIN msg=audit(1771839941.099:63366): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839941.099:63367): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839941.102:63368): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=478181 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839941.161:63369): pid=478181 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839941.162:63370): pid=478181 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839941.164:63371): pid=478181 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839941.168:63372): pid=478181 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839941.170:63373): pid=478181 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839941.171:63374): pid=478181 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839941.175:63375): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839941.175:63376): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839941.178:63377): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839941.178:63378): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839941.180:63379): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=478196 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839941.192:63380): pid=478155 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=478159 suid=74 rport=38698 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=80.94.92.182 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771839941.193:63381): pid=478155 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=478159 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1771839941.194:63382): pid=478155 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=80.94.92.182 addr=80.94.92.182 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771839941.194:63383): pid=478155 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=478155 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771839941.194:63384): pid=478155 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=80.94.92.182 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1771839941.230:63385): pid=478196 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839941.230:63386): pid=478196 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=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 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839941.231:63387): pid=478196 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839941.232:63388): pid=478196 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=BPF msg=audit(1771839941.777:63389): prog-id=2338 op=LOAD
type=SYSCALL msg=audit(1771839941.777:63389): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffdd3613c50 a2=90 a3=9500000000 items=0 ppid=478245 pid=478246 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=225 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="ceph-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1771839941.777:63389): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F643838666336376230623239356166326365326262333234383166313732
type=BPF msg=audit(1771839941.827:63390): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1771839941.987:63391): pid=478196 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839941.987:63392): pid=478196 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839941.992:63393): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839941.992:63394): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839942.044:63395): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839942.044:63396): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839942.045:63397): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=478266 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839942.111:63398): pid=478266 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839942.111:63399): pid=478266 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839942.112:63400): pid=478266 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839942.117:63401): pid=478266 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839942.120:63402): pid=478266 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839942.120:63403): pid=478266 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839942.124:63404): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839942.124:63405): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839942.126:63406): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839942.126:63407): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839942.128:63408): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=478281 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839942.186:63409): pid=478281 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839942.186:63410): pid=478281 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6365706861646D2E64343332396666306235383338396131633837343432376536666138636461646332353435303739313137633737343464643965646634613365346663383366202D2D696D6167652072656769737472792E7265646861742E696F2F7268636570682F7268636570682D372D7268656C393A6C6174657374202D2D74696D656F757420383935205F6F726368206465706C6F79202D2D667369642066316665613337312D636236392D353738642D613364302D623563343732613834623436 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839942.187:63411): pid=478281 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839942.189:63412): pid=478281 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=BPF msg=audit(1771839942.787:63413): prog-id=2339 op=LOAD
type=SYSCALL msg=audit(1771839942.787:63413): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc7bee1da0 a2=90 a3=9500000000 items=0 ppid=478330 pid=478331 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=225 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="ceph-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1771839942.787:63413): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F363834356666366661363938646635633833333432653634366661383961
type=BPF msg=audit(1771839942.850:63414): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1771839942.996:63415): pid=478281 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839942.996:63416): pid=478281 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839943.002:63417): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839943.002:63418): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839943.175:63419): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839943.175:63420): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839943.177:63421): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=478352 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839943.235:63422): pid=478352 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839943.236:63423): pid=478352 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839943.236:63424): pid=478352 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839943.241:63425): pid=478352 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839943.243:63426): pid=478352 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839943.244:63427): pid=478352 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839943.247:63428): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839943.247:63429): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839943.250:63430): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839943.250:63431): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839943.252:63432): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=478367 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839943.315:63433): pid=478367 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839943.315:63434): pid=478367 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6365706861646D2E64343332396666306235383338396131633837343432376536666138636461646332353435303739313137633737343464643965646634613365346663383366202D2D696D6167652072656769737472792E7265646861742E696F2F7268636570682F7268636570682D372D7268656C393A6C6174657374202D2D74696D656F757420383935205F6F726368206465706C6F79202D2D667369642066316665613337312D636236392D353738642D613364302D623563343732613834623436 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839943.316:63435): pid=478367 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839943.319:63436): pid=478367 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=SERVICE_START msg=audit(1771839943.533:63437): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839943.537:63438): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839943.541:63439): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839943.545:63440): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839943.549:63441): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771839943.641:63442): pid=478437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=478437 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771839943.643:63443): pid=478382 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=478437 suid=74 rport=51176 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771839943.643:63444): pid=478382 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=478437 suid=74 rport=51176 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_STOP msg=audit(1771839943.787:63445): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771839943.870:63446): pid=478382 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=478382 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771839943.871:63447): pid=478382 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839943.913:63448): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839943.928:63449): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1771839943.941:63450): prog-id=2340 op=LOAD
type=SYSCALL msg=audit(1771839943.941:63450): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc0e800d70 a2=90 a3=9500000000 items=0 ppid=478551 pid=478552 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=225 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="ceph-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1771839943.941:63450): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F376634303436373833316663633065656637373163623332363161373761
type=SERVICE_STOP msg=audit(1771839943.965:63451): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1771839943.989:63452): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1771839944.030:63453): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1771839944.227:63454): pid=478367 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839944.227:63455): pid=478367 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839944.234:63456): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839944.234:63457): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839950.128:63458): pid=478577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=478577 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771839950.218:63459): pid=478576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=478577 suid=74 rport=52656 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771839950.218:63460): pid=478576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=478577 suid=74 rport=52656 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771839950.317:63461): pid=478576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=478576 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771839950.318:63462): pid=478576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839959.028:63463): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839959.031:63464): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839959.201:63465): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839959.277:63466): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1771839968.790:63467): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839968.790:63468): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839968.793:63469): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=478621 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839968.858:63470): pid=478621 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839968.858:63471): pid=478621 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839968.859:63472): pid=478621 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839968.865:63473): pid=478621 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839968.868:63474): pid=478621 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839968.868:63475): pid=478621 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839968.878:63476): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839968.878:63477): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839968.895:63478): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839968.895:63479): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839968.897:63480): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=478636 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839968.952:63481): pid=478636 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839968.952:63482): pid=478636 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6365706861646D2E64343332396666306235383338396131633837343432376536666138636461646332353435303739313137633737343464643965646634613365346663383366202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839968.953:63483): pid=478636 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839968.954:63484): pid=478636 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839969.499:63485): pid=478636 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839969.499:63486): pid=478636 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839969.544:63487): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839969.545:63488): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1771839971.024:63489): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839971.332:63490): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839974.031:63491): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839974.035:63492): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839974.039:63493): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839974.042:63494): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839974.048:63495): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839974.258:63496): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839974.379:63497): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839974.462:63498): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839974.497:63499): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771839974.557:63500): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1771839976.526:63501): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839976.526:63502): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839976.530:63503): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=478880 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839976.595:63504): pid=478880 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839976.595:63505): pid=478880 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F6574632F63657068 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839976.596:63506): pid=478880 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839976.600:63507): pid=478880 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839976.605:63508): pid=478880 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839976.605:63509): pid=478880 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839976.616:63510): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839976.616:63511): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839976.626:63512): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839976.626:63513): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839976.627:63514): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=478895 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839976.680:63515): pid=478895 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839976.681:63516): pid=478895 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6574632F63657068 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839976.683:63517): pid=478895 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839976.685:63518): pid=478895 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839976.689:63519): pid=478895 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839976.689:63520): pid=478895 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839976.696:63521): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839976.696:63522): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839976.712:63523): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839976.713:63524): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839976.714:63525): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=478910 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839976.776:63526): pid=478910 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839976.776:63527): pid=478910 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=746F756368202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839976.777:63528): pid=478910 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839976.779:63529): pid=478910 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839976.784:63530): pid=478910 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839976.784:63531): pid=478910 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839976.789:63532): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839976.789:63533): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839976.804:63534): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839976.804:63535): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839976.806:63536): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=478925 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839976.867:63537): pid=478925 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839976.868:63538): pid=478925 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220636570682D61646D696E202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D623563343732613834623436 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839976.869:63539): pid=478925 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839976.872:63540): pid=478925 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839976.875:63541): pid=478925 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839976.875:63542): pid=478925 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839976.879:63543): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839976.879:63544): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839976.884:63545): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839976.884:63546): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839976.886:63547): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=478940 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839976.946:63548): pid=478940 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839976.947:63549): pid=478940 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839976.948:63550): pid=478940 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839976.951:63551): pid=478940 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839976.953:63552): pid=478940 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839976.954:63553): pid=478940 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839976.959:63554): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839976.959:63555): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839976.967:63556): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839976.967:63557): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839976.969:63558): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=478955 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_END msg=audit(1771839977.013:63559): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839977.013:63560): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839977.015:63561): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839977.015:63562): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839977.016:63563): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=478968 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839977.076:63564): pid=478968 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839977.076:63565): pid=478968 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220303A30202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839977.077:63566): pid=478968 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839977.079:63567): pid=478968 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839977.086:63568): pid=478968 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839977.086:63569): pid=478968 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839977.090:63570): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839977.090:63571): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839977.093:63572): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839977.094:63573): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839977.095:63574): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=478983 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839977.156:63575): pid=478983 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839977.156:63576): pid=478983 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839977.157:63577): pid=478983 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839977.160:63578): pid=478983 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839977.163:63579): pid=478983 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839977.163:63580): pid=478983 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839977.167:63581): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839977.167:63582): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839977.170:63583): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839977.170:63584): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839977.171:63585): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=478998 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839977.220:63586): pid=478998 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839977.220:63587): pid=478998 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D76202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6574632F636570682F636570682E636F6E662E6E6577202F6574632F636570682F636570682E636F6E66 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839977.220:63588): pid=478998 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839977.222:63589): pid=478998 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839977.225:63590): pid=478998 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839977.225:63591): pid=478998 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839977.229:63592): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839977.229:63593): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839977.232:63594): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839977.232:63595): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839977.234:63596): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=479013 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839977.288:63597): pid=479013 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839977.288:63598): pid=479013 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E666967 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839977.289:63599): pid=479013 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839977.291:63600): pid=479013 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839977.295:63601): pid=479013 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839977.295:63602): pid=479013 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839977.299:63603): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839977.299:63604): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839977.303:63605): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839977.304:63606): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839977.305:63607): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=479028 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839977.363:63608): pid=479028 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839977.363:63609): pid=479028 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E666967 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839977.363:63610): pid=479028 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839977.366:63611): pid=479028 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839977.369:63612): pid=479028 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839977.369:63613): pid=479028 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839977.374:63614): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839977.374:63615): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839977.380:63616): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839977.380:63617): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839977.382:63618): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=479043 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839977.447:63619): pid=479043 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839977.447:63620): pid=479043 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=746F756368202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839977.448:63621): pid=479043 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839977.451:63622): pid=479043 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839977.454:63623): pid=479043 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839977.454:63624): pid=479043 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839977.459:63625): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839977.459:63626): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839977.462:63627): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839977.462:63628): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839977.464:63629): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=479058 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839977.524:63630): pid=479058 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839977.525:63631): pid=479058 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220636570682D61646D696E202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D623563343732613834623436 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839977.526:63632): pid=479058 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839977.529:63633): pid=479058 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839977.532:63634): pid=479058 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839977.532:63635): pid=479058 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839977.536:63636): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839977.536:63637): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839977.543:63638): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839977.543:63639): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839977.544:63640): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=479073 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839977.610:63641): pid=479073 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839977.610:63642): pid=479073 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839977.611:63643): pid=479073 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839977.614:63644): pid=479073 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839977.617:63645): pid=479073 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839977.617:63646): pid=479073 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839977.622:63647): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839977.622:63648): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839977.628:63649): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839977.628:63650): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839977.629:63651): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=479088 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_END msg=audit(1771839977.685:63652): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839977.685:63653): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839977.694:63654): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839977.694:63655): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839977.695:63656): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=479101 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839977.755:63657): pid=479101 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839977.755:63658): pid=479101 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220303A30202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839977.756:63659): pid=479101 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839977.759:63660): pid=479101 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839977.766:63661): pid=479101 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839977.766:63662): pid=479101 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839977.772:63663): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839977.772:63664): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839977.775:63665): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839977.775:63666): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839977.778:63667): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=479116 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839977.842:63668): pid=479116 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839977.843:63669): pid=479116 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839977.843:63670): pid=479116 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839977.847:63671): pid=479116 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839977.850:63672): pid=479116 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839977.850:63673): pid=479116 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839977.854:63674): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839977.855:63675): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839977.858:63676): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839977.858:63677): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839977.859:63678): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=479131 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839977.920:63679): pid=479131 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839977.921:63680): pid=479131 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D76202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E6669672F636570682E636F6E662E6E6577202F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E6669672F636570682E636F6E66 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839977.921:63681): pid=479131 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839977.925:63682): pid=479131 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839977.929:63683): pid=479131 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839977.929:63684): pid=479131 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839977.933:63685): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839977.933:63686): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839978.172:63687): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839978.172:63688): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839978.174:63689): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=479146 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839978.236:63690): pid=479146 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839978.237:63691): pid=479146 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839978.237:63692): pid=479146 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839978.240:63693): pid=479146 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839978.244:63694): pid=479146 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839978.244:63695): pid=479146 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839978.248:63696): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839978.248:63697): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839980.338:63698): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839980.338:63699): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839980.339:63700): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=479161 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839980.393:63701): pid=479161 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839980.393:63702): pid=479161 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839980.394:63703): pid=479161 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839980.397:63704): pid=479161 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839980.399:63705): pid=479161 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839980.400:63706): pid=479161 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839980.404:63707): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839980.404:63708): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839980.408:63709): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839980.408:63710): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839980.409:63711): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=479176 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839980.469:63712): pid=479176 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839980.469:63713): pid=479176 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=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 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839980.469:63714): pid=479176 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839980.472:63715): pid=479176 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=BPF msg=audit(1771839981.012:63716): prog-id=2341 op=LOAD
type=SYSCALL msg=audit(1771839981.012:63716): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffe728f9380 a2=90 a3=9500000000 items=0 ppid=479222 pid=479223 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=225 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="ceph-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1771839981.012:63716): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F316338616130346361306436386266613739646462323337336562613634
type=BPF msg=audit(1771839981.066:63717): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1771839981.230:63718): pid=479176 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839981.230:63719): pid=479176 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839981.236:63720): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839981.236:63721): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839981.313:63722): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839981.314:63723): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839981.315:63724): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=479244 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839981.372:63725): pid=479244 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839981.372:63726): pid=479244 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839981.373:63727): pid=479244 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839981.378:63728): pid=479244 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839981.380:63729): pid=479244 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839981.380:63730): pid=479244 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839981.384:63731): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839981.384:63732): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839981.387:63733): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839981.387:63734): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839981.389:63735): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=479259 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839981.442:63736): pid=479259 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839981.442:63737): pid=479259 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=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 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839981.443:63738): pid=479259 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839981.447:63739): pid=479259 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=BPF msg=audit(1771839982.011:63740): prog-id=2342 op=LOAD
type=SYSCALL msg=audit(1771839982.011:63740): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fffd05a8b10 a2=90 a3=9500000000 items=0 ppid=479306 pid=479307 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=225 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="ceph-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1771839982.011:63740): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F313033376330616636316338623465313064373336303464663638616133
type=BPF msg=audit(1771839982.064:63741): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1771839982.217:63742): pid=479259 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839982.218:63743): pid=479259 uid=1002 auid=1002 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839982.225:63744): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839982.225:63745): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839985.625:63746): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=476477 suid=1002 rport=56152 laddr=192.168.122.105 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839985.625:63747): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=476477 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_END msg=audit(1771839985.629:63748): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.105 addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839985.629:63749): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.105 addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839985.630:63750): pid=476474 uid=0 auid=1002 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=476474 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1771839985.963:63751): pid=479356 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=479356 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771839985.964:63752): pid=479355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=479356 suid=74 rport=36150 laddr=192.168.122.105 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771839985.964:63753): pid=479355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=479356 suid=74 rport=36150 laddr=192.168.122.105 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1771839986.010:63754): pid=479355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="ceph-admin" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771839986.010:63755): pid=479355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:5d:af:d5:32:45:ed:07:be:e7:1f:3e:5d:df:71:a9:73:54:8f:8e:fa:d2:85:b6:d3:b6:a1:f0:02:d2:3b:bc:9a exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1771839986.028:63756): pid=479355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.104 addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771839986.028:63757): pid=479355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=479356 suid=74 rport=36150 laddr=192.168.122.105 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1771839986.031:63758): pid=479355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.104 addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1771839986.031:63759): pid=479355 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1002 tty=(none) old-ses=4294967295 ses=226 res=1UID="root" OLD-AUID="unset" AUID="ceph-admin"
type=SYSCALL msg=audit(1771839986.031:63759): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffdf5657140 a2=4 a3=3ea items=0 ppid=416325 pid=479355 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=226 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="ceph-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1771839986.031:63759): proctitle=737368643A20636570682D61646D696E205B707269765D
type=USER_ROLE_CHANGE msg=audit(1771839986.032:63760): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.104 addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=USER_START msg=audit(1771839986.058:63761): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.104 addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839986.059:63762): pid=479358 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=479358 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="root"
type=CRED_ACQ msg=audit(1771839986.060:63763): pid=479358 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.104 addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=USER_LOGIN msg=audit(1771839986.105:63764): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839986.105:63765): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839986.106:63766): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=479359 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839986.156:63767): pid=479359 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839986.156:63768): pid=479359 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839986.158:63769): pid=479359 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839986.162:63770): pid=479359 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839986.165:63771): pid=479359 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839986.165:63772): pid=479359 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839986.170:63773): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839986.170:63774): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839986.173:63775): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839986.173:63776): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839986.175:63777): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=479374 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839986.226:63778): pid=479374 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839986.226:63779): pid=479374 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6365706861646D2E64343332396666306235383338396131633837343432376536666138636461646332353435303739313137633737343464643965646634613365346663383366202D2D696D6167652072656769737472792E7265646861742E696F2F7268636570682F7268636570682D372D7268656C393A6C6174657374202D2D74696D656F757420383935206C73 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839986.227:63780): pid=479374 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839986.229:63781): pid=479374 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839987.782:63782): pid=479374 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839987.782:63783): pid=479374 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839987.787:63784): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839987.787:63785): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839987.834:63786): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839987.834:63787): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839987.836:63788): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=479533 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839987.901:63789): pid=479533 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839987.902:63790): pid=479533 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839987.904:63791): pid=479533 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839987.910:63792): pid=479533 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839987.914:63793): pid=479533 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839987.914:63794): pid=479533 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839987.920:63795): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839987.921:63796): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839987.925:63797): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839987.925:63798): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839987.927:63799): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=479548 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839987.994:63800): pid=479548 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839987.994:63801): pid=479548 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6365706861646D2E64343332396666306235383338396131633837343432376536666138636461646332353435303739313137633737343464643965646634613365346663383366202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839987.995:63802): pid=479548 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839987.998:63803): pid=479548 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839988.641:63804): pid=479548 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839988.641:63805): pid=479548 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839988.670:63806): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839988.670:63807): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839988.845:63808): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839988.845:63809): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839988.846:63810): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=479595 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839988.907:63811): pid=479595 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839988.907:63812): pid=479595 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839988.908:63813): pid=479595 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839988.912:63814): pid=479595 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839988.915:63815): pid=479595 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839988.915:63816): pid=479595 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839988.918:63817): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839988.918:63818): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839988.924:63819): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839988.924:63820): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839988.926:63821): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=479610 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839988.987:63822): pid=479610 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839988.987:63823): pid=479610 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6365706861646D2E64343332396666306235383338396131633837343432376536666138636461646332353435303739313137633737343464643965646634613365346663383366202D2D696D6167652072656769737472792E7265646861742E696F2F7268636570682F7268636570682D372D7268656C393A6C6174657374202D2D74696D656F757420383935206C6973742D6E6574776F726B73 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839988.988:63824): pid=479610 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839988.991:63825): pid=479610 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839989.436:63826): pid=479610 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839989.437:63827): pid=479610 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839989.442:63828): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839989.442:63829): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839989.500:63830): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839989.501:63831): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839989.502:63832): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=479643 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839989.563:63833): pid=479643 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839989.563:63834): pid=479643 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F6574632F63657068 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839989.564:63835): pid=479643 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=SERVICE_START msg=audit(1771839989.588:63836): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771839989.593:63837): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1771839989.594:63838): pid=479643 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839989.598:63839): pid=479643 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839989.598:63840): pid=479643 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839989.603:63841): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839989.603:63842): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839989.607:63843): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839989.607:63844): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839989.609:63845): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=479669 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839989.676:63846): pid=479669 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839989.677:63847): pid=479669 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6574632F63657068 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839989.678:63848): pid=479669 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839989.681:63849): pid=479669 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839989.684:63850): pid=479669 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839989.685:63851): pid=479669 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839989.689:63852): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839989.689:63853): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839989.695:63854): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839989.695:63855): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839989.696:63856): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=479693 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839989.765:63857): pid=479693 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839989.765:63858): pid=479693 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=746F756368202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839989.766:63859): pid=479693 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839989.769:63860): pid=479693 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839989.772:63861): pid=479693 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839989.773:63862): pid=479693 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839989.777:63863): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839989.777:63864): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839989.780:63865): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839989.780:63866): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839989.783:63867): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=479727 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=SERVICE_STOP msg=audit(1771839989.823:63868): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1771839989.844:63869): pid=479727 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839989.844:63870): pid=479727 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220636570682D61646D696E202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D623563343732613834623436 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839989.845:63871): pid=479727 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=SERVICE_STOP msg=audit(1771839989.847:63872): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1771839989.849:63873): pid=479727 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839989.853:63874): pid=479727 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839989.853:63875): pid=479727 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839989.857:63876): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839989.857:63877): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839989.860:63878): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839989.860:63879): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839989.861:63880): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=479744 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839989.911:63881): pid=479744 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839989.911:63882): pid=479744 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839989.911:63883): pid=479744 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839989.914:63884): pid=479744 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839989.917:63885): pid=479744 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839989.917:63886): pid=479744 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839989.922:63887): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839989.922:63888): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839989.930:63889): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839989.930:63890): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839989.932:63891): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=479759 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_END msg=audit(1771839989.978:63892): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839989.978:63893): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839989.982:63894): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839989.982:63895): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839989.983:63896): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=479772 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839990.044:63897): pid=479772 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839990.045:63898): pid=479772 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220303A30202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839990.045:63899): pid=479772 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839990.048:63900): pid=479772 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839990.053:63901): pid=479772 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839990.053:63902): pid=479772 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839990.058:63903): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839990.059:63904): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839990.061:63905): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839990.062:63906): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839990.064:63907): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=479787 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839990.118:63908): pid=479787 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839990.118:63909): pid=479787 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839990.119:63910): pid=479787 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839990.122:63911): pid=479787 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839990.124:63912): pid=479787 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839990.124:63913): pid=479787 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839990.128:63914): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839990.129:63915): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839990.131:63916): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839990.131:63917): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839990.133:63918): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=479802 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839990.179:63919): pid=479802 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839990.179:63920): pid=479802 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D76202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6574632F636570682F636570682E636F6E662E6E6577202F6574632F636570682F636570682E636F6E66 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839990.180:63921): pid=479802 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839990.182:63922): pid=479802 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839990.185:63923): pid=479802 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839990.185:63924): pid=479802 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839990.189:63925): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839990.189:63926): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839990.193:63927): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839990.193:63928): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839990.195:63929): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=479817 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839990.265:63930): pid=479817 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839990.265:63931): pid=479817 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E666967 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839990.265:63932): pid=479817 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839990.268:63933): pid=479817 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839990.271:63934): pid=479817 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839990.271:63935): pid=479817 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839990.274:63936): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839990.274:63937): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839990.276:63938): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839990.276:63939): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839990.278:63940): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=479832 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839990.333:63941): pid=479832 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839990.333:63942): pid=479832 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E666967 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839990.334:63943): pid=479832 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839990.337:63944): pid=479832 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839990.340:63945): pid=479832 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839990.340:63946): pid=479832 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839990.344:63947): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839990.344:63948): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839990.347:63949): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839990.347:63950): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839990.348:63951): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=479847 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839990.410:63952): pid=479847 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839990.411:63953): pid=479847 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=746F756368202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839990.412:63954): pid=479847 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839990.414:63955): pid=479847 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839990.417:63956): pid=479847 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839990.418:63957): pid=479847 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839990.421:63958): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839990.421:63959): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839990.425:63960): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839990.425:63961): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839990.426:63962): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=479862 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839990.485:63963): pid=479862 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839990.485:63964): pid=479862 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220636570682D61646D696E202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D623563343732613834623436 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839990.486:63965): pid=479862 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839990.489:63966): pid=479862 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839990.493:63967): pid=479862 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839990.493:63968): pid=479862 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839990.499:63969): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839990.499:63970): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839990.509:63971): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839990.510:63972): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839990.511:63973): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=479877 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839990.569:63974): pid=479877 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839990.569:63975): pid=479877 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839990.569:63976): pid=479877 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839990.572:63977): pid=479877 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839990.574:63978): pid=479877 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839990.575:63979): pid=479877 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839990.580:63980): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839990.580:63981): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839990.587:63982): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839990.587:63983): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839990.588:63984): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=479892 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_END msg=audit(1771839990.640:63985): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839990.640:63986): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839990.644:63987): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839990.644:63988): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839990.646:63989): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=479905 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839990.704:63990): pid=479905 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839990.704:63991): pid=479905 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220303A30202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839990.705:63992): pid=479905 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839990.708:63993): pid=479905 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839990.713:63994): pid=479905 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839990.713:63995): pid=479905 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839990.717:63996): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839990.717:63997): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839990.720:63998): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839990.720:63999): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839990.722:64000): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=479920 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839990.779:64001): pid=479920 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839990.779:64002): pid=479920 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839990.780:64003): pid=479920 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839990.782:64004): pid=479920 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839990.785:64005): pid=479920 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839990.785:64006): pid=479920 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839990.790:64007): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839990.790:64008): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839990.795:64009): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839990.795:64010): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839990.797:64011): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=479935 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839990.854:64012): pid=479935 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839990.854:64013): pid=479935 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D76202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E6669672F636570682E636F6E662E6E6577202F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E6669672F636570682E636F6E66 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839990.855:64014): pid=479935 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839990.857:64015): pid=479935 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839990.860:64016): pid=479935 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839990.861:64017): pid=479935 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839990.865:64018): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839990.865:64019): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839990.870:64020): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839990.870:64021): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839990.872:64022): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=479950 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839990.935:64023): pid=479950 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839990.935:64024): pid=479950 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F6574632F63657068 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839990.936:64025): pid=479950 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839990.938:64026): pid=479950 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839990.941:64027): pid=479950 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839990.942:64028): pid=479950 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839990.946:64029): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839990.946:64030): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839990.949:64031): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839990.949:64032): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839990.951:64033): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=479965 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839991.009:64034): pid=479965 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839991.009:64035): pid=479965 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6574632F63657068 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839991.010:64036): pid=479965 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839991.013:64037): pid=479965 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839991.016:64038): pid=479965 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839991.016:64039): pid=479965 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839991.021:64040): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839991.022:64041): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839991.024:64042): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839991.025:64043): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839991.026:64044): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=479980 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839991.078:64045): pid=479980 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839991.078:64046): pid=479980 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=746F756368202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6574632F636570682F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839991.079:64047): pid=479980 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839991.081:64048): pid=479980 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839991.084:64049): pid=479980 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839991.084:64050): pid=479980 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839991.087:64051): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839991.088:64052): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839991.089:64053): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839991.089:64054): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839991.091:64055): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=479995 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839991.139:64056): pid=479995 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839991.139:64057): pid=479995 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220636570682D61646D696E202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D623563343732613834623436 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839991.140:64058): pid=479995 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839991.142:64059): pid=479995 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839991.146:64060): pid=479995 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839991.146:64061): pid=479995 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839991.152:64062): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839991.152:64063): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839991.158:64064): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839991.158:64065): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839991.160:64066): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=480010 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839991.214:64067): pid=480010 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839991.214:64068): pid=480010 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6574632F636570682F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839991.215:64069): pid=480010 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839991.217:64070): pid=480010 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839991.220:64071): pid=480010 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839991.221:64072): pid=480010 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839991.224:64073): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839991.224:64074): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839991.227:64075): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839991.227:64076): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839991.228:64077): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=480025 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_END msg=audit(1771839991.286:64078): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839991.286:64079): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839991.288:64080): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839991.288:64081): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839991.290:64082): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=480038 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839991.352:64083): pid=480038 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839991.352:64084): pid=480038 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220303A30202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6574632F636570682F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839991.353:64085): pid=480038 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839991.356:64086): pid=480038 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839991.362:64087): pid=480038 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839991.363:64088): pid=480038 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839991.368:64089): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839991.368:64090): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839991.375:64091): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839991.375:64092): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839991.376:64093): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=480053 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839991.439:64094): pid=480053 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839991.440:64095): pid=480053 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363030202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6574632F636570682F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839991.441:64096): pid=480053 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839991.444:64097): pid=480053 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839991.447:64098): pid=480053 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839991.448:64099): pid=480053 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839991.456:64100): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839991.456:64101): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839991.462:64102): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839991.462:64103): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839991.463:64104): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=480068 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839991.528:64105): pid=480068 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839991.528:64106): pid=480068 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D76202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6574632F636570682F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577202F6574632F636570682F636570682E636C69656E742E61646D696E2E6B657972696E67 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839991.529:64107): pid=480068 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839991.532:64108): pid=480068 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839991.536:64109): pid=480068 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839991.536:64110): pid=480068 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839991.541:64111): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839991.541:64112): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839991.545:64113): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839991.545:64114): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839991.546:64115): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=480083 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839991.596:64116): pid=480083 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839991.597:64117): pid=480083 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E666967 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839991.597:64118): pid=480083 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839991.600:64119): pid=480083 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839991.603:64120): pid=480083 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839991.603:64121): pid=480083 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839991.614:64122): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839991.614:64123): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839991.623:64124): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839991.623:64125): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839991.625:64126): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=480098 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839991.690:64127): pid=480098 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839991.691:64128): pid=480098 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E666967 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839991.692:64129): pid=480098 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839991.695:64130): pid=480098 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839991.698:64131): pid=480098 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839991.699:64132): pid=480098 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839991.702:64133): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839991.702:64134): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839991.707:64135): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839991.707:64136): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839991.709:64137): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=480113 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839991.770:64138): pid=480113 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839991.770:64139): pid=480113 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=746F756368202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E6669672F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839991.771:64140): pid=480113 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839991.774:64141): pid=480113 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839991.777:64142): pid=480113 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839991.777:64143): pid=480113 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839991.782:64144): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839991.782:64145): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839991.791:64146): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839991.791:64147): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839991.793:64148): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=480128 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839992.143:64149): pid=480128 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839992.143:64150): pid=480128 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220636570682D61646D696E202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D623563343732613834623436 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839992.144:64151): pid=480128 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839992.147:64152): pid=480128 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839992.150:64153): pid=480128 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839992.150:64154): pid=480128 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839993.554:64155): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839993.554:64156): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839993.567:64157): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839993.567:64158): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839993.568:64159): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=480143 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839993.620:64160): pid=480143 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839993.620:64161): pid=480143 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E6669672F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839993.621:64162): pid=480143 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839993.624:64163): pid=480143 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839993.626:64164): pid=480143 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839993.627:64165): pid=480143 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839993.635:64166): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839993.635:64167): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839993.641:64168): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839993.641:64169): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839993.642:64170): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=480158 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_END msg=audit(1771839993.697:64171): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839993.697:64172): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839993.706:64173): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839993.706:64174): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839993.707:64175): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=480171 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839993.758:64176): pid=480171 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839993.758:64177): pid=480171 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220303A30202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E6669672F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839993.759:64178): pid=480171 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839993.761:64179): pid=480171 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839993.767:64180): pid=480171 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839993.768:64181): pid=480171 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839993.772:64182): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839993.772:64183): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839993.775:64184): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839993.775:64185): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839993.777:64186): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=480186 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839993.846:64187): pid=480186 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839993.846:64188): pid=480186 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363030202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E6669672F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839993.847:64189): pid=480186 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839993.849:64190): pid=480186 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839993.853:64191): pid=480186 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839993.853:64192): pid=480186 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839993.857:64193): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839993.857:64194): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839993.860:64195): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839993.860:64196): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839993.862:64197): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=480201 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839993.921:64198): pid=480201 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839993.921:64199): pid=480201 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D76202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E6669672F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577202F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E6669672F636570682E636C69656E742E61646D696E2E6B657972696E67 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839993.921:64200): pid=480201 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839993.924:64201): pid=480201 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839993.928:64202): pid=480201 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839993.928:64203): pid=480201 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839994.255:64204): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839994.255:64205): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771839994.455:64206): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771839994.455:64207): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771839994.457:64208): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=480216 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771839994.505:64209): pid=480216 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771839994.506:64210): pid=480216 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771839994.506:64211): pid=480216 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771839994.509:64212): pid=480216 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839994.512:64213): pid=480216 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771839994.512:64214): pid=480216 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771839994.516:64215): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771839994.516:64216): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1771840002.027:64217): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771840002.072:64218): pid=480278 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=480278 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771840002.073:64219): pid=480266 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=480278 suid=74 rport=57428 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771840002.073:64220): pid=480266 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=480278 suid=74 rport=57428 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_STOP msg=audit(1771840002.253:64221): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771840002.267:64222): pid=480266 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=480266 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771840002.267:64223): pid=480266 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840005.029:64224): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840005.033:64225): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840005.037:64226): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840005.040:64227): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840005.044:64228): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840005.319:64229): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840005.356:64230): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840005.409:64231): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840005.464:64232): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840005.524:64233): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771840007.550:64234): pid=480444 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=480444 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771840007.552:64235): pid=480443 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=480444 suid=74 rport=58800 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771840007.552:64236): pid=480443 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=480444 suid=74 rport=58800 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771840007.789:64237): pid=480443 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=480443 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771840007.789:64238): pid=480443 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1771840008.758:64239): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840008.758:64240): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840008.760:64241): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=480445 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840008.832:64242): pid=480445 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840008.832:64243): pid=480445 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840008.834:64244): pid=480445 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840008.839:64245): pid=480445 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840008.843:64246): pid=480445 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840008.843:64247): pid=480445 uid=1002 auid=1002 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840008.848:64248): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840008.848:64249): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840009.069:64250): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=479358 suid=1002 rport=36150 laddr=192.168.122.105 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.104 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840009.070:64251): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=479358 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_END msg=audit(1771840009.073:64252): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.104 addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840009.073:64253): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.104 addr=192.168.122.104 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840009.074:64254): pid=479355 uid=0 auid=1002 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=479355 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1771840009.312:64255): pid=480461 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=480461 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771840009.313:64256): pid=480460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=480461 suid=74 rport=36216 laddr=192.168.122.105 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771840009.314:64257): pid=480460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=480461 suid=74 rport=36216 laddr=192.168.122.105 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1771840009.348:64258): pid=480460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="ceph-admin" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771840009.348:64259): pid=480460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:5d:af:d5:32:45:ed:07:be:e7:1f:3e:5d:df:71:a9:73:54:8f:8e:fa:d2:85:b6:d3:b6:a1:f0:02:d2:3b:bc:9a exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1771840009.380:64260): pid=480460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.107 addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771840009.381:64261): pid=480460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=480461 suid=74 rport=36216 laddr=192.168.122.105 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1771840009.383:64262): pid=480460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.107 addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1771840009.384:64263): pid=480460 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1002 tty=(none) old-ses=4294967295 ses=227 res=1UID="root" OLD-AUID="unset" AUID="ceph-admin"
type=SYSCALL msg=audit(1771840009.384:64263): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffe5011c270 a2=4 a3=3ea items=0 ppid=416325 pid=480460 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=227 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="ceph-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1771840009.384:64263): proctitle=737368643A20636570682D61646D696E205B707269765D
type=USER_ROLE_CHANGE msg=audit(1771840009.386:64264): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.107 addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=USER_START msg=audit(1771840009.419:64265): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.107 addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840009.421:64266): pid=480463 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=480463 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="root"
type=CRED_ACQ msg=audit(1771840009.423:64267): pid=480463 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.107 addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=USER_LOGIN msg=audit(1771840009.508:64268): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840009.508:64269): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840009.511:64270): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=480464 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840009.582:64271): pid=480464 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840009.583:64272): pid=480464 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840009.584:64273): pid=480464 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840009.589:64274): pid=480464 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840009.591:64275): pid=480464 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840009.592:64276): pid=480464 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840009.596:64277): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840009.596:64278): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840009.599:64279): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840009.599:64280): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840009.601:64281): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=480479 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840009.672:64282): pid=480479 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840009.672:64283): pid=480479 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6365706861646D2E64343332396666306235383338396131633837343432376536666138636461646332353435303739313137633737343464643965646634613365346663383366202D2D696D6167652072656769737472792E7265646861742E696F2F7268636570682F7268636570682D372D7268656C393A6C6174657374202D2D74696D656F757420383935206C73 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840009.673:64284): pid=480479 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840009.676:64285): pid=480479 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840011.337:64286): pid=480479 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840011.337:64287): pid=480479 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840011.342:64288): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840011.343:64289): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840011.384:64290): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840011.384:64291): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840011.386:64292): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=480635 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840011.459:64293): pid=480635 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840011.460:64294): pid=480635 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840011.461:64295): pid=480635 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840011.467:64296): pid=480635 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840011.471:64297): pid=480635 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840011.471:64298): pid=480635 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840011.477:64299): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840011.477:64300): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840011.480:64301): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840011.480:64302): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840011.482:64303): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=480650 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840011.544:64304): pid=480650 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840011.544:64305): pid=480650 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6365706861646D2E64343332396666306235383338396131633837343432376536666138636461646332353435303739313137633737343464643965646634613365346663383366202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840011.545:64306): pid=480650 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840011.547:64307): pid=480650 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840012.233:64308): pid=480650 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840012.234:64309): pid=480650 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840012.274:64310): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840012.274:64311): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840012.340:64312): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840012.340:64313): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840012.342:64314): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=480698 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840012.406:64315): pid=480698 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840012.406:64316): pid=480698 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840012.407:64317): pid=480698 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840012.411:64318): pid=480698 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840012.414:64319): pid=480698 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840012.414:64320): pid=480698 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840012.417:64321): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840012.418:64322): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840012.419:64323): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840012.419:64324): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840012.421:64325): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=480713 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840012.485:64326): pid=480713 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840012.485:64327): pid=480713 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6365706861646D2E64343332396666306235383338396131633837343432376536666138636461646332353435303739313137633737343464643965646634613365346663383366202D2D696D6167652072656769737472792E7265646861742E696F2F7268636570682F7268636570682D372D7268656C393A6C6174657374202D2D74696D656F757420383935206C6973742D6E6574776F726B73 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840012.486:64328): pid=480713 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840012.489:64329): pid=480713 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840012.914:64330): pid=480713 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840012.915:64331): pid=480713 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840012.920:64332): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840012.920:64333): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840013.374:64334): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840013.374:64335): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840013.375:64336): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=480749 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840013.443:64337): pid=480749 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840013.443:64338): pid=480749 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F6574632F63657068 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840013.444:64339): pid=480749 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840013.448:64340): pid=480749 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840013.452:64341): pid=480749 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840013.452:64342): pid=480749 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840013.462:64343): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840013.462:64344): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840013.473:64345): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840013.473:64346): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840013.475:64347): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=480764 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840013.540:64348): pid=480764 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840013.540:64349): pid=480764 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6574632F63657068 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840013.541:64350): pid=480764 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840013.544:64351): pid=480764 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840013.547:64352): pid=480764 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840013.548:64353): pid=480764 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840013.555:64354): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840013.556:64355): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840013.562:64356): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840013.562:64357): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840013.564:64358): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=480779 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840013.627:64359): pid=480779 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840013.627:64360): pid=480779 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=746F756368202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840013.628:64361): pid=480779 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840013.631:64362): pid=480779 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840013.637:64363): pid=480779 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840013.637:64364): pid=480779 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840013.642:64365): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840013.642:64366): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840013.645:64367): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840013.645:64368): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840013.647:64369): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=480794 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840013.711:64370): pid=480794 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840013.712:64371): pid=480794 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220636570682D61646D696E202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D623563343732613834623436 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840013.713:64372): pid=480794 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840013.717:64373): pid=480794 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840013.720:64374): pid=480794 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840013.721:64375): pid=480794 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840013.726:64376): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840013.726:64377): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840013.729:64378): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840013.729:64379): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840013.731:64380): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=480809 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840013.788:64381): pid=480809 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840013.789:64382): pid=480809 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840013.789:64383): pid=480809 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840013.792:64384): pid=480809 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840013.795:64385): pid=480809 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840013.795:64386): pid=480809 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840013.799:64387): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840013.799:64388): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840013.803:64389): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840013.803:64390): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840013.804:64391): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=480824 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_END msg=audit(1771840013.865:64392): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840013.865:64393): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840013.869:64394): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840013.869:64395): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840013.871:64396): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=480837 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840013.928:64397): pid=480837 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840013.929:64398): pid=480837 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220303A30202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840013.929:64399): pid=480837 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840013.932:64400): pid=480837 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840013.937:64401): pid=480837 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840013.937:64402): pid=480837 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840013.943:64403): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840013.943:64404): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840013.946:64405): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840013.947:64406): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840013.948:64407): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=480852 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840014.002:64408): pid=480852 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840014.002:64409): pid=480852 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840014.003:64410): pid=480852 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840014.006:64411): pid=480852 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840014.008:64412): pid=480852 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840014.008:64413): pid=480852 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840014.013:64414): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840014.013:64415): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840014.019:64416): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840014.019:64417): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840014.021:64418): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=480867 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840014.085:64419): pid=480867 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840014.086:64420): pid=480867 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D76202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6574632F636570682F636570682E636F6E662E6E6577202F6574632F636570682F636570682E636F6E66 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840014.086:64421): pid=480867 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840014.089:64422): pid=480867 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840014.093:64423): pid=480867 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840014.093:64424): pid=480867 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840014.100:64425): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840014.100:64426): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840014.111:64427): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840014.111:64428): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840014.113:64429): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=480882 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840014.184:64430): pid=480882 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840014.184:64431): pid=480882 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E666967 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840014.185:64432): pid=480882 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840014.189:64433): pid=480882 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840014.192:64434): pid=480882 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840014.193:64435): pid=480882 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840014.199:64436): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840014.199:64437): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840014.207:64438): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840014.208:64439): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840014.209:64440): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=480897 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840014.285:64441): pid=480897 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840014.286:64442): pid=480897 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E666967 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840014.287:64443): pid=480897 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840014.291:64444): pid=480897 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840014.295:64445): pid=480897 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840014.295:64446): pid=480897 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840014.299:64447): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840014.299:64448): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840014.303:64449): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840014.303:64450): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840014.306:64451): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=480912 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840014.372:64452): pid=480912 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840014.372:64453): pid=480912 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=746F756368202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840014.373:64454): pid=480912 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840014.376:64455): pid=480912 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840014.380:64456): pid=480912 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840014.380:64457): pid=480912 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840014.385:64458): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840014.385:64459): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840014.389:64460): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840014.389:64461): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840014.391:64462): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=480927 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840014.446:64463): pid=480927 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840014.448:64464): pid=480927 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220636570682D61646D696E202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D623563343732613834623436 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840014.448:64465): pid=480927 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840014.451:64466): pid=480927 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840014.455:64467): pid=480927 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840014.455:64468): pid=480927 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840014.461:64469): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840014.461:64470): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840014.467:64471): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840014.467:64472): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840014.467:64473): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=480942 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840014.522:64474): pid=480942 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840014.522:64475): pid=480942 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840014.522:64476): pid=480942 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840014.524:64477): pid=480942 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840014.527:64478): pid=480942 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840014.527:64479): pid=480942 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840014.532:64480): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840014.532:64481): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840014.536:64482): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840014.536:64483): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840014.537:64484): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=480957 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_END msg=audit(1771840014.583:64485): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840014.583:64486): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840014.585:64487): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840014.586:64488): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840014.587:64489): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=480970 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840014.644:64490): pid=480970 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840014.644:64491): pid=480970 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220303A30202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840014.646:64492): pid=480970 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840014.649:64493): pid=480970 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840014.654:64494): pid=480970 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840014.656:64495): pid=480970 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840014.660:64496): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840014.660:64497): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840014.661:64498): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840014.661:64499): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840014.663:64500): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=480985 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840014.721:64501): pid=480985 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840014.721:64502): pid=480985 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840014.723:64503): pid=480985 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840014.726:64504): pid=480985 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840014.727:64505): pid=480985 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840014.729:64506): pid=480985 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840014.732:64507): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840014.732:64508): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840014.735:64509): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840014.735:64510): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840014.736:64511): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=481000 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840014.788:64512): pid=481000 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840014.789:64513): pid=481000 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D76202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E6669672F636570682E636F6E662E6E6577202F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E6669672F636570682E636F6E66 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840014.791:64514): pid=481000 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840014.793:64515): pid=481000 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840014.796:64516): pid=481000 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840014.797:64517): pid=481000 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840014.800:64518): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840014.800:64519): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840014.802:64520): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840014.802:64521): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840014.804:64522): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=481015 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840014.877:64523): pid=481015 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840014.877:64524): pid=481015 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F6574632F63657068 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840014.877:64525): pid=481015 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840014.880:64526): pid=481015 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840014.883:64527): pid=481015 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840014.883:64528): pid=481015 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840014.888:64529): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840014.888:64530): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840014.895:64531): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840014.895:64532): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840014.897:64533): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=481030 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840014.962:64534): pid=481030 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840014.962:64535): pid=481030 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6574632F63657068 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840014.963:64536): pid=481030 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840014.966:64537): pid=481030 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840014.970:64538): pid=481030 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840014.970:64539): pid=481030 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840014.975:64540): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840014.975:64541): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840014.979:64542): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840014.979:64543): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840014.980:64544): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=481045 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840015.029:64545): pid=481045 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840015.029:64546): pid=481045 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=746F756368202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6574632F636570682F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840015.030:64547): pid=481045 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840015.032:64548): pid=481045 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840015.034:64549): pid=481045 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840015.035:64550): pid=481045 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840015.039:64551): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840015.039:64552): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840015.048:64553): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840015.048:64554): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840015.049:64555): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=481060 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840015.111:64556): pid=481060 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840015.112:64557): pid=481060 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220636570682D61646D696E202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D623563343732613834623436 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840015.112:64558): pid=481060 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840015.116:64559): pid=481060 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840015.120:64560): pid=481060 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840015.120:64561): pid=481060 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840015.125:64562): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840015.125:64563): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840015.127:64564): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840015.127:64565): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840015.128:64566): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=481075 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840015.190:64567): pid=481075 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840015.190:64568): pid=481075 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6574632F636570682F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840015.190:64569): pid=481075 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840015.193:64570): pid=481075 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840015.197:64571): pid=481075 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840015.197:64572): pid=481075 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840015.203:64573): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840015.203:64574): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840015.207:64575): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840015.207:64576): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840015.209:64577): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=481090 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_END msg=audit(1771840015.255:64578): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840015.255:64579): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840015.257:64580): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840015.257:64581): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840015.260:64582): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=481103 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840015.323:64583): pid=481103 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840015.323:64584): pid=481103 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220303A30202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6574632F636570682F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840015.324:64585): pid=481103 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840015.327:64586): pid=481103 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840015.332:64587): pid=481103 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840015.332:64588): pid=481103 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840015.337:64589): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840015.337:64590): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840015.340:64591): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840015.340:64592): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840015.341:64593): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=481118 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840015.402:64594): pid=481118 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840015.402:64595): pid=481118 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363030202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6574632F636570682F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840015.403:64596): pid=481118 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840015.405:64597): pid=481118 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840015.408:64598): pid=481118 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840015.408:64599): pid=481118 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840015.416:64600): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840015.416:64601): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840015.424:64602): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840015.424:64603): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840015.426:64604): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=481133 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840015.479:64605): pid=481133 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840015.479:64606): pid=481133 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D76202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6574632F636570682F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577202F6574632F636570682F636570682E636C69656E742E61646D696E2E6B657972696E67 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840015.479:64607): pid=481133 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840015.482:64608): pid=481133 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840015.485:64609): pid=481133 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840015.485:64610): pid=481133 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840015.495:64611): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840015.495:64612): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840015.511:64613): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840015.511:64614): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840015.512:64615): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=481148 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840015.571:64616): pid=481148 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840015.572:64617): pid=481148 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E666967 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840015.572:64618): pid=481148 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840015.576:64619): pid=481148 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840015.579:64620): pid=481148 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840015.579:64621): pid=481148 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840015.586:64622): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840015.586:64623): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840015.593:64624): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840015.593:64625): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840015.595:64626): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=481163 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840015.662:64627): pid=481163 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840015.662:64628): pid=481163 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E666967 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840015.663:64629): pid=481163 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840015.666:64630): pid=481163 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840015.670:64631): pid=481163 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840015.670:64632): pid=481163 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840015.675:64633): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840015.675:64634): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840015.678:64635): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840015.678:64636): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840015.680:64637): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=481178 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840015.748:64638): pid=481178 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840015.748:64639): pid=481178 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=746F756368202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E6669672F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840015.749:64640): pid=481178 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840015.753:64641): pid=481178 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840015.756:64642): pid=481178 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840015.756:64643): pid=481178 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840015.763:64644): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840015.763:64645): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840015.769:64646): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840015.769:64647): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840015.770:64648): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=481193 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840015.833:64649): pid=481193 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840015.833:64650): pid=481193 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220636570682D61646D696E202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D623563343732613834623436 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840015.834:64651): pid=481193 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840015.837:64652): pid=481193 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840015.841:64653): pid=481193 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840015.841:64654): pid=481193 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840015.850:64655): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840015.850:64656): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840015.859:64657): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840015.859:64658): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840015.861:64659): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=481208 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840015.922:64660): pid=481208 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840015.923:64661): pid=481208 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E6669672F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840015.923:64662): pid=481208 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840015.927:64663): pid=481208 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840015.931:64664): pid=481208 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840015.932:64665): pid=481208 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840015.942:64666): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840015.942:64667): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840015.950:64668): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840015.951:64669): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840015.952:64670): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=481223 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_END msg=audit(1771840015.998:64671): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840015.998:64672): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840016.001:64673): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840016.001:64674): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840016.003:64675): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=481236 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840016.068:64676): pid=481236 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840016.069:64677): pid=481236 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220303A30202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E6669672F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840016.070:64678): pid=481236 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840016.073:64679): pid=481236 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840016.079:64680): pid=481236 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840016.079:64681): pid=481236 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840016.084:64682): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840016.084:64683): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840016.087:64684): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840016.087:64685): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840016.089:64686): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=481251 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840016.149:64687): pid=481251 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840016.149:64688): pid=481251 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363030202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E6669672F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840016.150:64689): pid=481251 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840016.153:64690): pid=481251 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840016.156:64691): pid=481251 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840016.157:64692): pid=481251 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840016.161:64693): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840016.161:64694): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840016.164:64695): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840016.165:64696): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840016.166:64697): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=481266 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840016.227:64698): pid=481266 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840016.228:64699): pid=481266 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D76202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E6669672F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577202F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E6669672F636570682E636C69656E742E61646D696E2E6B657972696E67 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840016.229:64700): pid=481266 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840016.232:64701): pid=481266 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840016.237:64702): pid=481266 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840016.237:64703): pid=481266 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840016.242:64704): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840016.242:64705): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840016.427:64706): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840016.427:64707): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840016.428:64708): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=481281 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840016.487:64709): pid=481281 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840016.488:64710): pid=481281 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840016.488:64711): pid=481281 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840016.492:64712): pid=481281 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840016.495:64713): pid=481281 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840016.495:64714): pid=481281 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840016.500:64715): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840016.500:64716): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840017.669:64717): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840017.669:64718): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840017.671:64719): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=481296 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840017.734:64720): pid=481296 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840017.734:64721): pid=481296 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840017.735:64722): pid=481296 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840017.738:64723): pid=481296 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840017.741:64724): pid=481296 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840017.741:64725): pid=481296 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840017.745:64726): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840017.745:64727): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840017.749:64728): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840017.749:64729): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840017.750:64730): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=481311 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840017.810:64731): pid=481311 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840017.811:64732): pid=481311 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=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 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840017.811:64733): pid=481311 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840017.814:64734): pid=481311 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=BPF msg=audit(1771840018.377:64735): prog-id=2343 op=LOAD
type=SYSCALL msg=audit(1771840018.377:64735): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fffaf0f3e70 a2=90 a3=9500000000 items=0 ppid=481357 pid=481358 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=227 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="ceph-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1771840018.377:64735): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F316239313264383664616261353233336539316262386462353261356537
type=BPF msg=audit(1771840018.427:64736): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1771840018.601:64737): pid=481311 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840018.601:64738): pid=481311 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840018.607:64739): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840018.607:64740): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1771840020.028:64741): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840020.032:64742): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1771840020.217:64743): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840020.217:64744): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840020.222:64745): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=481422 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=SERVICE_STOP msg=audit(1771840020.223:64746): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840020.274:64747): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1771840020.289:64748): pid=481422 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840020.289:64749): pid=481422 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840020.290:64750): pid=481422 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840020.295:64751): pid=481422 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840020.299:64752): pid=481422 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840020.299:64753): pid=481422 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840020.303:64754): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840020.303:64755): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840026.556:64756): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840026.556:64757): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840026.557:64758): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=481438 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840026.624:64759): pid=481438 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840026.625:64760): pid=481438 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F6574632F63657068 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840026.626:64761): pid=481438 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840026.631:64762): pid=481438 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840026.634:64763): pid=481438 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840026.635:64764): pid=481438 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840026.642:64765): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840026.642:64766): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840026.652:64767): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840026.652:64768): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840026.653:64769): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=481453 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840026.714:64770): pid=481453 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840026.714:64771): pid=481453 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6574632F63657068 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840026.715:64772): pid=481453 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840026.718:64773): pid=481453 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840026.721:64774): pid=481453 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840026.721:64775): pid=481453 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840026.730:64776): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840026.730:64777): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840026.740:64778): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840026.741:64779): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840026.742:64780): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=481468 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840026.805:64781): pid=481468 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840026.806:64782): pid=481468 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=746F756368202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840026.806:64783): pid=481468 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840026.810:64784): pid=481468 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840026.814:64785): pid=481468 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840026.814:64786): pid=481468 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840026.821:64787): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840026.821:64788): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840026.828:64789): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840026.828:64790): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840026.829:64791): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=481483 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840026.892:64792): pid=481483 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840026.892:64793): pid=481483 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220636570682D61646D696E202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D623563343732613834623436 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840026.893:64794): pid=481483 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840026.896:64795): pid=481483 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840026.900:64796): pid=481483 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840026.901:64797): pid=481483 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840026.906:64798): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840026.906:64799): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840026.910:64800): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840026.911:64801): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840026.912:64802): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=481498 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840026.974:64803): pid=481498 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840026.974:64804): pid=481498 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840026.975:64805): pid=481498 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840026.978:64806): pid=481498 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840026.981:64807): pid=481498 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840026.981:64808): pid=481498 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840026.989:64809): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840026.989:64810): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840026.997:64811): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840026.997:64812): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840026.998:64813): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=481513 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_END msg=audit(1771840027.051:64814): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840027.051:64815): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840027.053:64816): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840027.053:64817): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840027.054:64818): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=481526 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840027.116:64819): pid=481526 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840027.116:64820): pid=481526 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220303A30202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840027.117:64821): pid=481526 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840027.120:64822): pid=481526 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840027.126:64823): pid=481526 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840027.127:64824): pid=481526 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840027.131:64825): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840027.131:64826): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840027.134:64827): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840027.134:64828): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840027.136:64829): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=481541 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840027.197:64830): pid=481541 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840027.197:64831): pid=481541 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840027.198:64832): pid=481541 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840027.201:64833): pid=481541 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840027.204:64834): pid=481541 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840027.204:64835): pid=481541 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840027.209:64836): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840027.209:64837): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840027.212:64838): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840027.212:64839): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840027.213:64840): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=481556 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840027.272:64841): pid=481556 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840027.273:64842): pid=481556 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D76202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6574632F636570682F636570682E636F6E662E6E6577202F6574632F636570682F636570682E636F6E66 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840027.273:64843): pid=481556 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840027.277:64844): pid=481556 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840027.280:64845): pid=481556 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840027.281:64846): pid=481556 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840027.287:64847): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840027.287:64848): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840027.294:64849): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840027.295:64850): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840027.296:64851): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=481571 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840027.349:64852): pid=481571 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840027.350:64853): pid=481571 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E666967 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840027.350:64854): pid=481571 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840027.352:64855): pid=481571 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840027.356:64856): pid=481571 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840027.356:64857): pid=481571 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840027.360:64858): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840027.360:64859): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840027.371:64860): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840027.371:64861): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840027.372:64862): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=481586 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840027.428:64863): pid=481586 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840027.428:64864): pid=481586 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E666967 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840027.429:64865): pid=481586 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840027.431:64866): pid=481586 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840027.434:64867): pid=481586 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840027.434:64868): pid=481586 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840027.438:64869): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840027.439:64870): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840027.445:64871): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840027.445:64872): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840027.446:64873): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=481601 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840027.509:64874): pid=481601 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840027.509:64875): pid=481601 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=746F756368202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840027.510:64876): pid=481601 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840027.513:64877): pid=481601 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840027.516:64878): pid=481601 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840027.517:64879): pid=481601 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840027.523:64880): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840027.523:64881): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840027.530:64882): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840027.530:64883): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840027.532:64884): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=481616 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840027.594:64885): pid=481616 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840027.595:64886): pid=481616 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220636570682D61646D696E202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D623563343732613834623436 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840027.595:64887): pid=481616 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840027.599:64888): pid=481616 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840027.603:64889): pid=481616 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840027.603:64890): pid=481616 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840027.609:64891): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840027.609:64892): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840027.617:64893): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840027.617:64894): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840027.619:64895): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=481631 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840027.683:64896): pid=481631 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840027.684:64897): pid=481631 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840027.684:64898): pid=481631 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840027.687:64899): pid=481631 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840027.691:64900): pid=481631 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840027.691:64901): pid=481631 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840027.696:64902): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840027.696:64903): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840027.699:64904): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840027.699:64905): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840027.700:64906): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=481646 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_END msg=audit(1771840027.775:64907): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840027.775:64908): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840027.777:64909): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840027.777:64910): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840027.779:64911): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=481659 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840027.840:64912): pid=481659 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840027.840:64913): pid=481659 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220303A30202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840027.841:64914): pid=481659 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840027.845:64915): pid=481659 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840027.851:64916): pid=481659 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840027.852:64917): pid=481659 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840027.857:64918): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840027.857:64919): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840027.864:64920): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840027.864:64921): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840027.866:64922): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=481674 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840027.934:64923): pid=481674 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840027.935:64924): pid=481674 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840027.935:64925): pid=481674 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840027.939:64926): pid=481674 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840027.942:64927): pid=481674 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840027.942:64928): pid=481674 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840027.947:64929): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840027.947:64930): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840027.951:64931): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840027.951:64932): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840027.953:64933): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=481689 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840028.016:64934): pid=481689 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840028.016:64935): pid=481689 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D76202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E6669672F636570682E636F6E662E6E6577202F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E6669672F636570682E636F6E66 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840028.017:64936): pid=481689 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840028.020:64937): pid=481689 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840028.024:64938): pid=481689 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840028.024:64939): pid=481689 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840028.030:64940): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840028.030:64941): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840028.202:64942): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840028.202:64943): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840028.203:64944): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=481704 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840028.260:64945): pid=481704 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840028.261:64946): pid=481704 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840028.261:64947): pid=481704 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840028.265:64948): pid=481704 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840028.268:64949): pid=481704 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840028.269:64950): pid=481704 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840028.273:64951): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840028.274:64952): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840030.252:64953): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840030.252:64954): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840030.254:64955): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=481719 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840030.315:64956): pid=481719 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840030.315:64957): pid=481719 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840030.316:64958): pid=481719 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840030.318:64959): pid=481719 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840030.321:64960): pid=481719 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840030.321:64961): pid=481719 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840030.325:64962): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840030.325:64963): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840030.328:64964): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840030.328:64965): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840030.330:64966): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=481734 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840030.383:64967): pid=481734 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840030.384:64968): pid=481734 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6365706861646D2E64343332396666306235383338396131633837343432376536666138636461646332353435303739313137633737343464643965646634613365346663383366202D2D696D6167652072656769737472792E7265646861742E696F2F7268636570682F7268636570682D372D7268656C393A6C6174657374202D2D74696D656F757420383935205F6F726368206465706C6F79202D2D667369642066316665613337312D636236392D353738642D613364302D623563343732613834623436 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840030.384:64969): pid=481734 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840030.388:64970): pid=481734 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=BPF msg=audit(1771840030.932:64971): prog-id=2344 op=LOAD
type=SYSCALL msg=audit(1771840030.932:64971): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc971d73b0 a2=90 a3=9500000000 items=0 ppid=481781 pid=481782 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=227 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="ceph-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1771840030.932:64971): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F313439613330313930373437363163636333386433646238356132333961
type=BPF msg=audit(1771840030.978:64972): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1771840031.221:64973): pid=481734 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840031.221:64974): pid=481734 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840031.226:64975): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840031.226:64976): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840031.343:64977): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840031.343:64978): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840031.344:64979): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=481805 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840031.409:64980): pid=481805 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840031.409:64981): pid=481805 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840031.410:64982): pid=481805 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840031.414:64983): pid=481805 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840031.417:64984): pid=481805 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840031.418:64985): pid=481805 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840031.422:64986): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840031.422:64987): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840031.425:64988): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840031.425:64989): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840031.427:64990): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=481820 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840031.488:64991): pid=481820 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840031.489:64992): pid=481820 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=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 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840031.489:64993): pid=481820 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840031.492:64994): pid=481820 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=BPF msg=audit(1771840032.043:64995): prog-id=2345 op=LOAD
type=SYSCALL msg=audit(1771840032.043:64995): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff43b429c0 a2=90 a3=9500000000 items=0 ppid=481868 pid=481869 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=227 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="ceph-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1771840032.043:64995): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F343930366562633631306362303932353735623534373735393231616538
type=BPF msg=audit(1771840032.091:64996): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1771840032.221:64997): pid=481820 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840032.222:64998): pid=481820 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840032.227:64999): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840032.227:65000): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840032.271:65001): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840032.271:65002): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840032.274:65003): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=481889 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840032.337:65004): pid=481889 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840032.337:65005): pid=481889 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840032.338:65006): pid=481889 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840032.359:65007): pid=481889 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840032.361:65008): pid=481889 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=SERVICE_START msg=audit(1771840032.361:65009): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1771840032.361:65010): pid=481889 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840032.365:65011): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840032.365:65012): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840032.368:65013): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840032.368:65014): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840032.370:65015): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=481905 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840032.430:65016): pid=481905 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840032.431:65017): pid=481905 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=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 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840032.433:65018): pid=481905 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840032.436:65019): pid=481905 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=SERVICE_STOP msg=audit(1771840032.590:65020): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1771840032.989:65021): prog-id=2346 op=LOAD
type=SYSCALL msg=audit(1771840032.989:65021): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fffbb560de0 a2=90 a3=9500000000 items=0 ppid=481980 pid=481981 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=227 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="ceph-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1771840032.989:65021): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F656136613235636465343065656164386531336235303734383366616137
type=BPF msg=audit(1771840033.034:65022): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1771840033.173:65023): pid=481905 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840033.173:65024): pid=481905 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840033.180:65025): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840033.180:65026): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1771840036.026:65027): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840036.031:65028): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840036.035:65029): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840036.038:65030): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840036.043:65031): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840036.389:65032): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840036.404:65033): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840036.421:65034): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840036.450:65035): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840036.475:65036): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1771840050.023:65037): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840050.023:65038): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840050.025:65039): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=482151 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840050.083:65040): pid=482151 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840050.083:65041): pid=482151 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840050.085:65042): pid=482151 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840050.089:65043): pid=482151 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840050.093:65044): pid=482151 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840050.094:65045): pid=482151 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840050.097:65046): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840050.098:65047): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1771840051.035:65048): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840051.039:65049): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840051.208:65050): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840051.329:65051): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1771840052.385:65052): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840052.386:65053): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840052.388:65054): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=482210 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840052.450:65055): pid=482210 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840052.451:65056): pid=482210 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840052.451:65057): pid=482210 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840052.455:65058): pid=482210 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840052.459:65059): pid=482210 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840052.459:65060): pid=482210 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840052.464:65061): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840052.464:65062): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840055.018:65063): pid=482226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=482226 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771840055.107:65064): pid=482225 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=482226 suid=74 rport=33512 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771840055.107:65065): pid=482225 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=482226 suid=74 rport=33512 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771840055.189:65066): pid=482225 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=482225 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771840055.189:65067): pid=482225 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1771840059.923:65068): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840059.923:65069): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840059.925:65070): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=482227 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840060.002:65071): pid=482227 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840060.003:65072): pid=482227 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F6574632F63657068 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840060.005:65073): pid=482227 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840060.008:65074): pid=482227 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840060.013:65075): pid=482227 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840060.014:65076): pid=482227 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840060.024:65077): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840060.024:65078): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840060.024:65079): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840060.024:65080): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840060.026:65081): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=482242 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840060.089:65082): pid=482242 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840060.089:65083): pid=482242 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6574632F63657068 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840060.090:65084): pid=482242 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840060.092:65085): pid=482242 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840060.097:65086): pid=482242 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840060.097:65087): pid=482242 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840060.102:65088): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840060.102:65089): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840060.105:65090): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840060.105:65091): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840060.106:65092): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=482257 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840060.167:65093): pid=482257 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840060.168:65094): pid=482257 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=746F756368202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840060.168:65095): pid=482257 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840060.171:65096): pid=482257 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840060.174:65097): pid=482257 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840060.175:65098): pid=482257 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840060.180:65099): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840060.180:65100): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840060.184:65101): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840060.184:65102): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840060.185:65103): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=482272 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840060.245:65104): pid=482272 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840060.245:65105): pid=482272 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220636570682D61646D696E202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D623563343732613834623436 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840060.246:65106): pid=482272 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840060.249:65107): pid=482272 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840060.252:65108): pid=482272 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840060.253:65109): pid=482272 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840060.257:65110): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840060.257:65111): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840060.260:65112): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840060.260:65113): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840060.262:65114): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=482287 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840060.327:65115): pid=482287 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840060.327:65116): pid=482287 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840060.328:65117): pid=482287 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840060.330:65118): pid=482287 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840060.333:65119): pid=482287 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840060.333:65120): pid=482287 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840060.337:65121): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840060.337:65122): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840060.346:65123): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840060.346:65124): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840060.347:65125): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=482302 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_END msg=audit(1771840060.396:65126): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840060.396:65127): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840060.398:65128): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840060.398:65129): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840060.400:65130): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=482315 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840060.461:65131): pid=482315 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840060.461:65132): pid=482315 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220303A30202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840060.461:65133): pid=482315 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840060.464:65134): pid=482315 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840060.472:65135): pid=482315 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840060.472:65136): pid=482315 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840060.476:65137): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840060.476:65138): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840060.478:65139): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840060.478:65140): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840060.479:65141): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=482330 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840060.543:65142): pid=482330 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840060.543:65143): pid=482330 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840060.544:65144): pid=482330 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840060.546:65145): pid=482330 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840060.550:65146): pid=482330 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840060.550:65147): pid=482330 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840060.555:65148): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840060.555:65149): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840060.558:65150): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840060.558:65151): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840060.560:65152): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=482345 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840060.621:65153): pid=482345 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840060.621:65154): pid=482345 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D76202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6574632F636570682F636570682E636F6E662E6E6577202F6574632F636570682F636570682E636F6E66 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840060.622:65155): pid=482345 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840060.624:65156): pid=482345 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840060.628:65157): pid=482345 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840060.628:65158): pid=482345 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840060.632:65159): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840060.632:65160): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840060.636:65161): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840060.636:65162): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840060.638:65163): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=482360 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840060.695:65164): pid=482360 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840060.696:65165): pid=482360 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E666967 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840060.696:65166): pid=482360 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840060.699:65167): pid=482360 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840060.702:65168): pid=482360 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840060.703:65169): pid=482360 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840060.707:65170): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840060.707:65171): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840060.711:65172): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840060.712:65173): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840060.713:65174): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=482375 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840060.772:65175): pid=482375 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840060.772:65176): pid=482375 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E666967 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840060.773:65177): pid=482375 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840060.775:65178): pid=482375 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840060.779:65179): pid=482375 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840060.779:65180): pid=482375 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840060.784:65181): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840060.784:65182): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840060.789:65183): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840060.789:65184): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840060.791:65185): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=482390 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840060.852:65186): pid=482390 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840060.853:65187): pid=482390 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=746F756368202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840060.853:65188): pid=482390 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840060.856:65189): pid=482390 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840060.859:65190): pid=482390 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840060.859:65191): pid=482390 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840060.864:65192): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840060.864:65193): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840060.867:65194): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840060.867:65195): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840060.869:65196): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=482405 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840060.936:65197): pid=482405 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840060.937:65198): pid=482405 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220636570682D61646D696E202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D623563343732613834623436 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840060.937:65199): pid=482405 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840060.940:65200): pid=482405 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840060.944:65201): pid=482405 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840060.944:65202): pid=482405 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840060.949:65203): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840060.949:65204): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840060.952:65205): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840060.952:65206): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840060.953:65207): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=482434 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840061.018:65208): pid=482434 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840061.018:65209): pid=482434 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840061.019:65210): pid=482434 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840061.022:65211): pid=482434 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840061.025:65212): pid=482434 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840061.026:65213): pid=482434 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840061.034:65214): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840061.034:65215): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840061.042:65216): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840061.042:65217): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840061.044:65218): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=482464 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_END msg=audit(1771840061.089:65219): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840061.089:65220): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840061.092:65221): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840061.092:65222): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840061.093:65223): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=482482 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840061.155:65224): pid=482482 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840061.155:65225): pid=482482 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220303A30202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840061.156:65226): pid=482482 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840061.158:65227): pid=482482 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840061.165:65228): pid=482482 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840061.165:65229): pid=482482 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840061.170:65230): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840061.170:65231): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840061.173:65232): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840061.173:65233): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840061.174:65234): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=482497 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840061.236:65235): pid=482497 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840061.236:65236): pid=482497 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840061.237:65237): pid=482497 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840061.240:65238): pid=482497 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840061.243:65239): pid=482497 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840061.243:65240): pid=482497 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840061.248:65241): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840061.248:65242): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840061.252:65243): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840061.252:65244): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840061.253:65245): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=482512 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840061.319:65246): pid=482512 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840061.320:65247): pid=482512 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D76202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E6669672F636570682E636F6E662E6E6577202F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E6669672F636570682E636F6E66 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840061.320:65248): pid=482512 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840061.323:65249): pid=482512 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840061.327:65250): pid=482512 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840061.327:65251): pid=482512 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840061.332:65252): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840061.332:65253): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840061.464:65254): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840061.464:65255): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840061.466:65256): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=482527 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840061.529:65257): pid=482527 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840061.530:65258): pid=482527 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840061.530:65259): pid=482527 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840061.533:65260): pid=482527 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840061.537:65261): pid=482527 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840061.537:65262): pid=482527 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840061.541:65263): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840061.541:65264): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840061.802:65265): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840061.802:65266): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840061.803:65267): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=482542 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840061.865:65268): pid=482542 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840061.866:65269): pid=482542 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840061.867:65270): pid=482542 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840061.870:65271): pid=482542 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840061.874:65272): pid=482542 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840061.874:65273): pid=482542 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840061.880:65274): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840061.880:65275): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840061.885:65276): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840061.885:65277): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840061.886:65278): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=482557 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840061.945:65279): pid=482557 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840061.945:65280): pid=482557 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=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 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840061.946:65281): pid=482557 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840061.948:65282): pid=482557 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=BPF msg=audit(1771840062.587:65283): prog-id=2347 op=LOAD
type=SYSCALL msg=audit(1771840062.587:65283): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffefd42a190 a2=90 a3=9500000000 items=0 ppid=482604 pid=482605 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=227 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="ceph-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1771840062.587:65283): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F633631316538386330636136626437623333636663363735333538623335
type=SERVICE_START msg=audit(1771840062.611:65284): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1771840062.624:65285): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1771840062.822:65286): pid=482557 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840062.822:65287): pid=482557 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840062.829:65288): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840062.829:65289): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840062.879:65290): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840062.879:65291): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840062.880:65292): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=482652 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840062.953:65293): pid=482652 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840062.953:65294): pid=482652 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840062.955:65295): pid=482652 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840062.962:65296): pid=482652 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840062.965:65297): pid=482652 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840062.966:65298): pid=482652 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=SERVICE_STOP msg=audit(1771840062.971:65299): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1771840062.971:65300): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840062.971:65301): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840062.974:65302): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840062.974:65303): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840062.976:65304): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=482672 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840063.039:65305): pid=482672 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840063.039:65306): pid=482672 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=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 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840063.040:65307): pid=482672 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840063.043:65308): pid=482672 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=BPF msg=audit(1771840063.627:65309): prog-id=2348 op=LOAD
type=SYSCALL msg=audit(1771840063.627:65309): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffe0ef7bbf0 a2=90 a3=9500000000 items=0 ppid=482720 pid=482721 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=227 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="ceph-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1771840063.627:65309): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F346632643331623630646266316666363437613062663335626530373230
type=BPF msg=audit(1771840063.688:65310): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1771840063.816:65311): pid=482672 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840063.816:65312): pid=482672 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840063.822:65313): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840063.822:65314): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840065.691:65315): pid=482745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=482745 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771840065.693:65316): pid=482744 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=482745 suid=74 rport=41008 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771840065.693:65317): pid=482744 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=482745 suid=74 rport=41008 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771840065.843:65318): pid=482744 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=482744 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771840065.844:65319): pid=482744 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840067.033:65320): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840067.036:65321): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840067.039:65322): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840067.041:65323): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840067.044:65324): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840067.384:65325): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840067.472:65326): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840067.498:65327): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840067.575:65328): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840067.717:65329): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1771840080.492:65330): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840080.492:65331): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840080.496:65332): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=482889 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840080.565:65333): pid=482889 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840080.565:65334): pid=482889 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840080.567:65335): pid=482889 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840080.572:65336): pid=482889 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840080.575:65337): pid=482889 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840080.576:65338): pid=482889 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840080.582:65339): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840080.582:65340): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840080.590:65341): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840080.590:65342): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840080.592:65343): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=482904 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840080.657:65344): pid=482904 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840080.657:65345): pid=482904 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6365706861646D2E64343332396666306235383338396131633837343432376536666138636461646332353435303739313137633737343464643965646634613365346663383366202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840080.657:65346): pid=482904 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840080.660:65347): pid=482904 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840081.318:65348): pid=482904 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840081.318:65349): pid=482904 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840081.441:65350): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840081.442:65351): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1771840082.036:65352): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840082.038:65353): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840082.213:65354): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840082.307:65355): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1771840083.168:65356): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840083.168:65357): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840083.171:65358): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=482994 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840083.237:65359): pid=482994 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840083.238:65360): pid=482994 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840083.239:65361): pid=482994 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840083.243:65362): pid=482994 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840083.246:65363): pid=482994 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840083.247:65364): pid=482994 uid=1002 auid=1002 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840083.251:65365): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840083.251:65366): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840087.910:65367): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=480463 suid=1002 rport=36216 laddr=192.168.122.105 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840087.910:65368): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=480463 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_END msg=audit(1771840087.913:65369): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.107 addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840087.914:65370): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.107 addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840087.914:65371): pid=480460 uid=0 auid=1002 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=480460 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1771840088.236:65372): pid=483010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=483010 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771840088.242:65373): pid=483009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=483010 suid=74 rport=52066 laddr=192.168.122.105 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771840088.242:65374): pid=483009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=483010 suid=74 rport=52066 laddr=192.168.122.105 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1771840088.286:65375): pid=483009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="ceph-admin" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771840088.286:65376): pid=483009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:5d:af:d5:32:45:ed:07:be:e7:1f:3e:5d:df:71:a9:73:54:8f:8e:fa:d2:85:b6:d3:b6:a1:f0:02:d2:3b:bc:9a exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1771840088.324:65377): pid=483009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.106 addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771840088.324:65378): pid=483009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=483010 suid=74 rport=52066 laddr=192.168.122.105 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1771840088.327:65379): pid=483009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.106 addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1771840088.327:65380): pid=483009 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1002 tty=(none) old-ses=4294967295 ses=228 res=1UID="root" OLD-AUID="unset" AUID="ceph-admin"
type=SYSCALL msg=audit(1771840088.327:65380): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffcbedb7680 a2=4 a3=3ea items=0 ppid=416325 pid=483009 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=228 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="ceph-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1771840088.327:65380): proctitle=737368643A20636570682D61646D696E205B707269765D
type=USER_ROLE_CHANGE msg=audit(1771840088.329:65381): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.106 addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=USER_START msg=audit(1771840088.362:65382): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.106 addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840088.364:65383): pid=483012 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=483012 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="root"
type=CRED_ACQ msg=audit(1771840088.365:65384): pid=483012 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.106 addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=USER_LOGIN msg=audit(1771840088.410:65385): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840088.410:65386): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840088.412:65387): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=483013 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840088.477:65388): pid=483013 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840088.478:65389): pid=483013 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840088.479:65390): pid=483013 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840088.484:65391): pid=483013 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840088.487:65392): pid=483013 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840088.487:65393): pid=483013 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840088.492:65394): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840088.492:65395): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840088.494:65396): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840088.495:65397): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840088.496:65398): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=483028 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840088.553:65399): pid=483028 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840088.554:65400): pid=483028 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6365706861646D2E64343332396666306235383338396131633837343432376536666138636461646332353435303739313137633737343464643965646634613365346663383366202D2D696D6167652072656769737472792E7265646861742E696F2F7268636570682F7268636570682D372D7268656C393A6C6174657374202D2D74696D656F757420383935206C73 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840088.554:65401): pid=483028 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840088.557:65402): pid=483028 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840090.041:65403): pid=483028 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840090.042:65404): pid=483028 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840090.052:65405): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840090.053:65406): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840090.094:65407): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840090.094:65408): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840090.095:65409): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=483187 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840090.172:65410): pid=483187 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840090.172:65411): pid=483187 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840090.173:65412): pid=483187 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840090.178:65413): pid=483187 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840090.181:65414): pid=483187 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840090.181:65415): pid=483187 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840090.186:65416): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840090.186:65417): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840090.189:65418): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840090.189:65419): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840090.191:65420): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=483202 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840090.255:65421): pid=483202 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840090.255:65422): pid=483202 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6365706861646D2E64343332396666306235383338396131633837343432376536666138636461646332353435303739313137633737343464643965646634613365346663383366202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840090.256:65423): pid=483202 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840090.259:65424): pid=483202 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840090.924:65425): pid=483202 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840090.925:65426): pid=483202 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840090.982:65427): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840090.982:65428): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840091.111:65429): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840091.111:65430): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840091.113:65431): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=483250 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840091.178:65432): pid=483250 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840091.178:65433): pid=483250 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840091.179:65434): pid=483250 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840091.182:65435): pid=483250 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840091.185:65436): pid=483250 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840091.185:65437): pid=483250 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840091.193:65438): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840091.193:65439): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840091.199:65440): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840091.200:65441): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840091.202:65442): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=483265 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840091.255:65443): pid=483265 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840091.256:65444): pid=483265 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6365706861646D2E64343332396666306235383338396131633837343432376536666138636461646332353435303739313137633737343464643965646634613365346663383366202D2D696D6167652072656769737472792E7265646861742E696F2F7268636570682F7268636570682D372D7268656C393A6C6174657374202D2D74696D656F757420383935206C6973742D6E6574776F726B73 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840091.256:65445): pid=483265 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840091.259:65446): pid=483265 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840091.692:65447): pid=483265 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840091.692:65448): pid=483265 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840091.697:65449): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840091.697:65450): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840091.785:65451): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840091.785:65452): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840091.786:65453): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=483299 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840091.848:65454): pid=483299 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840091.848:65455): pid=483299 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F6574632F63657068 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840091.849:65456): pid=483299 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840091.851:65457): pid=483299 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840091.854:65458): pid=483299 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840091.855:65459): pid=483299 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840091.859:65460): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840091.859:65461): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840091.865:65462): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840091.865:65463): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840091.867:65464): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=483314 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840091.923:65465): pid=483314 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840091.924:65466): pid=483314 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6574632F63657068 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840091.924:65467): pid=483314 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840091.927:65468): pid=483314 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840091.930:65469): pid=483314 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840091.930:65470): pid=483314 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840091.934:65471): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840091.934:65472): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840091.937:65473): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840091.937:65474): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840091.939:65475): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=483329 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840091.998:65476): pid=483329 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840091.998:65477): pid=483329 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=746F756368202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840091.998:65478): pid=483329 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840092.001:65479): pid=483329 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840092.004:65480): pid=483329 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840092.004:65481): pid=483329 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840092.008:65482): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840092.008:65483): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840092.011:65484): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840092.011:65485): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840092.012:65486): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=483344 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840092.063:65487): pid=483344 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840092.063:65488): pid=483344 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220636570682D61646D696E202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D623563343732613834623436 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840092.064:65489): pid=483344 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840092.067:65490): pid=483344 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840092.071:65491): pid=483344 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840092.071:65492): pid=483344 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840092.076:65493): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840092.076:65494): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840092.083:65495): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840092.083:65496): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840092.084:65497): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=483359 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840092.145:65498): pid=483359 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840092.145:65499): pid=483359 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840092.146:65500): pid=483359 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840092.149:65501): pid=483359 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840092.154:65502): pid=483359 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840092.154:65503): pid=483359 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840092.159:65504): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840092.159:65505): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840092.165:65506): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840092.165:65507): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840092.167:65508): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=483374 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_END msg=audit(1771840092.224:65509): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840092.224:65510): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840092.228:65511): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840092.228:65512): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840092.230:65513): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=483387 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840092.288:65514): pid=483387 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840092.288:65515): pid=483387 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220303A30202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840092.289:65516): pid=483387 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840092.292:65517): pid=483387 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840092.298:65518): pid=483387 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840092.298:65519): pid=483387 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840092.301:65520): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840092.301:65521): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840092.304:65522): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840092.304:65523): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840092.306:65524): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=483402 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840092.366:65525): pid=483402 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840092.366:65526): pid=483402 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840092.367:65527): pid=483402 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840092.369:65528): pid=483402 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840092.372:65529): pid=483402 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840092.372:65530): pid=483402 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840092.377:65531): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840092.377:65532): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840092.380:65533): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840092.380:65534): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840092.382:65535): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=483417 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840092.430:65536): pid=483417 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840092.430:65537): pid=483417 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D76202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6574632F636570682F636570682E636F6E662E6E6577202F6574632F636570682F636570682E636F6E66 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840092.430:65538): pid=483417 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840092.432:65539): pid=483417 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840092.435:65540): pid=483417 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840092.435:65541): pid=483417 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840092.439:65542): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840092.439:65543): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840092.443:65544): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840092.443:65545): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840092.445:65546): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=483432 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840092.495:65547): pid=483432 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840092.495:65548): pid=483432 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E666967 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840092.496:65549): pid=483432 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840092.499:65550): pid=483432 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840092.502:65551): pid=483432 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840092.502:65552): pid=483432 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840092.507:65553): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840092.507:65554): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840092.511:65555): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840092.511:65556): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840092.512:65557): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=483447 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840092.564:65558): pid=483447 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840092.564:65559): pid=483447 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E666967 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840092.565:65560): pid=483447 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840092.567:65561): pid=483447 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840092.569:65562): pid=483447 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840092.569:65563): pid=483447 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840092.573:65564): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840092.573:65565): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840092.575:65566): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840092.575:65567): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840092.577:65568): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=483462 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840092.628:65569): pid=483462 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840092.628:65570): pid=483462 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=746F756368202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840092.629:65571): pid=483462 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840092.631:65572): pid=483462 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840092.634:65573): pid=483462 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840092.634:65574): pid=483462 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840092.639:65575): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840092.639:65576): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840092.642:65577): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840092.642:65578): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840092.643:65579): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=483477 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840092.686:65580): pid=483477 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840092.686:65581): pid=483477 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220636570682D61646D696E202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D623563343732613834623436 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840092.687:65582): pid=483477 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840092.689:65583): pid=483477 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840092.692:65584): pid=483477 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840092.693:65585): pid=483477 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840092.697:65586): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840092.697:65587): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840092.700:65588): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840092.700:65589): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840092.701:65590): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=483492 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840092.748:65591): pid=483492 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840092.748:65592): pid=483492 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840092.749:65593): pid=483492 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840092.751:65594): pid=483492 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840092.754:65595): pid=483492 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840092.754:65596): pid=483492 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840092.758:65597): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840092.758:65598): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840092.759:65599): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840092.760:65600): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840092.761:65601): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=483507 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_END msg=audit(1771840092.802:65602): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840092.802:65603): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840092.803:65604): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840092.804:65605): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840092.805:65606): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=483520 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840092.865:65607): pid=483520 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840092.865:65608): pid=483520 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220303A30202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840092.866:65609): pid=483520 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840092.869:65610): pid=483520 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840092.875:65611): pid=483520 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840092.875:65612): pid=483520 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840092.879:65613): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840092.879:65614): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840092.881:65615): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840092.881:65616): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840092.883:65617): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=483535 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840092.940:65618): pid=483535 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840092.941:65619): pid=483535 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840092.941:65620): pid=483535 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840092.944:65621): pid=483535 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840092.947:65622): pid=483535 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840092.947:65623): pid=483535 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840092.951:65624): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840092.951:65625): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840092.954:65626): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840092.955:65627): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840092.956:65628): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=483550 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840093.014:65629): pid=483550 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840093.014:65630): pid=483550 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D76202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E6669672F636570682E636F6E662E6E6577202F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E6669672F636570682E636F6E66 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840093.015:65631): pid=483550 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=SERVICE_START msg=audit(1771840093.031:65632): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1771840093.034:65633): pid=483550 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840093.038:65634): pid=483550 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840093.039:65635): pid=483550 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840093.045:65636): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840093.045:65637): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840093.047:65638): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840093.047:65639): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840093.049:65640): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=483566 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840093.109:65641): pid=483566 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840093.110:65642): pid=483566 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F6574632F63657068 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840093.110:65643): pid=483566 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840093.114:65644): pid=483566 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840093.117:65645): pid=483566 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840093.117:65646): pid=483566 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840093.120:65647): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840093.120:65648): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840093.121:65649): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840093.121:65650): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840093.123:65651): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=483591 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840093.185:65652): pid=483591 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840093.185:65653): pid=483591 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6574632F63657068 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840093.186:65654): pid=483591 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840093.188:65655): pid=483591 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840093.192:65656): pid=483591 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840093.192:65657): pid=483591 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840093.196:65658): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840093.196:65659): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840093.200:65660): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840093.200:65661): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840093.202:65662): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=483622 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840093.263:65663): pid=483622 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840093.264:65664): pid=483622 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=746F756368202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6574632F636570682F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840093.264:65665): pid=483622 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840093.267:65666): pid=483622 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840093.269:65667): pid=483622 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840093.270:65668): pid=483622 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840093.275:65669): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840093.275:65670): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840093.277:65671): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840093.277:65672): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840093.278:65673): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=483642 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=SERVICE_STOP msg=audit(1771840093.287:65674): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1771840093.330:65675): pid=483642 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840093.331:65676): pid=483642 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220636570682D61646D696E202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D623563343732613834623436 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840093.331:65677): pid=483642 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840093.334:65678): pid=483642 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840093.337:65679): pid=483642 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840093.338:65680): pid=483642 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840093.341:65681): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840093.341:65682): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840093.343:65683): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840093.343:65684): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840093.345:65685): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=483657 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840093.405:65686): pid=483657 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840093.405:65687): pid=483657 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6574632F636570682F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840093.405:65688): pid=483657 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840093.408:65689): pid=483657 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840093.411:65690): pid=483657 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840093.411:65691): pid=483657 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840093.420:65692): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840093.421:65693): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840093.427:65694): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840093.428:65695): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840093.429:65696): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=483672 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_END msg=audit(1771840093.479:65697): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840093.479:65698): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840093.481:65699): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840093.482:65700): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840093.483:65701): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=483685 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840093.545:65702): pid=483685 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840093.545:65703): pid=483685 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220303A30202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6574632F636570682F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840093.546:65704): pid=483685 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840093.548:65705): pid=483685 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840093.555:65706): pid=483685 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840093.555:65707): pid=483685 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840093.559:65708): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840093.559:65709): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840093.561:65710): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840093.561:65711): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840093.562:65712): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=483700 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840093.615:65713): pid=483700 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840093.616:65714): pid=483700 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363030202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6574632F636570682F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840093.616:65715): pid=483700 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840093.619:65716): pid=483700 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840093.622:65717): pid=483700 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840093.623:65718): pid=483700 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840093.626:65719): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840093.626:65720): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840093.628:65721): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840093.628:65722): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840093.629:65723): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=483715 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840093.684:65724): pid=483715 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840093.684:65725): pid=483715 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D76202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6574632F636570682F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577202F6574632F636570682F636570682E636C69656E742E61646D696E2E6B657972696E67 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840093.685:65726): pid=483715 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840093.687:65727): pid=483715 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840093.690:65728): pid=483715 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840093.691:65729): pid=483715 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840093.696:65730): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840093.696:65731): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840093.701:65732): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840093.701:65733): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840093.702:65734): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=483730 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840093.762:65735): pid=483730 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840093.762:65736): pid=483730 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E666967 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840093.763:65737): pid=483730 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840093.766:65738): pid=483730 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840093.769:65739): pid=483730 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840093.770:65740): pid=483730 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840093.774:65741): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840093.774:65742): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840093.777:65743): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840093.777:65744): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840093.778:65745): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=483745 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840093.838:65746): pid=483745 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840093.838:65747): pid=483745 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E666967 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840093.839:65748): pid=483745 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840093.842:65749): pid=483745 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840093.846:65750): pid=483745 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840093.846:65751): pid=483745 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840093.852:65752): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840093.852:65753): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840093.859:65754): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840093.859:65755): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840093.860:65756): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=483760 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840093.929:65757): pid=483760 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840093.929:65758): pid=483760 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=746F756368202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E6669672F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840093.929:65759): pid=483760 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840093.932:65760): pid=483760 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840093.935:65761): pid=483760 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840093.936:65762): pid=483760 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840093.941:65763): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840093.941:65764): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840093.946:65765): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840093.946:65766): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840093.948:65767): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=483775 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840094.008:65768): pid=483775 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840094.009:65769): pid=483775 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220636570682D61646D696E202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D623563343732613834623436 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840094.009:65770): pid=483775 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840094.012:65771): pid=483775 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840094.016:65772): pid=483775 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840094.016:65773): pid=483775 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840094.020:65774): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840094.020:65775): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840094.028:65776): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840094.028:65777): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840094.029:65778): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=483790 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840094.089:65779): pid=483790 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840094.090:65780): pid=483790 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E6669672F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840094.090:65781): pid=483790 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840094.094:65782): pid=483790 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840094.097:65783): pid=483790 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840094.097:65784): pid=483790 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840094.101:65785): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840094.101:65786): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840094.104:65787): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840094.104:65788): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840094.106:65789): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=483805 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_END msg=audit(1771840094.159:65790): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840094.159:65791): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840094.161:65792): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840094.161:65793): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840094.162:65794): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=483818 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840094.227:65795): pid=483818 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840094.228:65796): pid=483818 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220303A30202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E6669672F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840094.228:65797): pid=483818 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840094.231:65798): pid=483818 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840094.237:65799): pid=483818 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840094.237:65800): pid=483818 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840094.241:65801): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840094.241:65802): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840094.244:65803): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840094.244:65804): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840094.245:65805): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=483833 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840094.306:65806): pid=483833 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840094.307:65807): pid=483833 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363030202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E6669672F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840094.307:65808): pid=483833 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840094.310:65809): pid=483833 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840094.313:65810): pid=483833 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840094.313:65811): pid=483833 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840094.318:65812): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840094.318:65813): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840094.321:65814): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840094.321:65815): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840094.322:65816): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=483848 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840094.383:65817): pid=483848 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840094.384:65818): pid=483848 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D76202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E6669672F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577202F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E6669672F636570682E636C69656E742E61646D696E2E6B657972696E67 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840094.384:65819): pid=483848 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840094.387:65820): pid=483848 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840094.391:65821): pid=483848 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840094.391:65822): pid=483848 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840094.396:65823): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840094.396:65824): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840094.460:65825): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840094.460:65826): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840094.462:65827): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=483863 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840094.522:65828): pid=483863 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840094.522:65829): pid=483863 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840094.523:65830): pid=483863 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840094.526:65831): pid=483863 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840094.529:65832): pid=483863 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840094.529:65833): pid=483863 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840094.533:65834): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840094.533:65835): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840096.983:65836): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840096.983:65837): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840096.984:65838): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=483878 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840097.050:65839): pid=483878 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840097.050:65840): pid=483878 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840097.050:65841): pid=483878 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840097.054:65842): pid=483878 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840097.057:65843): pid=483878 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840097.057:65844): pid=483878 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840097.062:65845): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840097.062:65846): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1771840098.031:65847): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840098.036:65848): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840098.040:65849): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840098.044:65850): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840098.047:65851): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840098.277:65852): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840098.440:65853): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840098.512:65854): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840098.548:65855): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840098.575:65856): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1771840102.122:65857): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840102.122:65858): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840102.126:65859): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=484036 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840102.194:65860): pid=484036 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840102.195:65861): pid=484036 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840102.196:65862): pid=484036 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840102.201:65863): pid=484036 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840102.204:65864): pid=484036 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840102.205:65865): pid=484036 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840102.209:65866): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840102.209:65867): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840102.461:65868): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840102.461:65869): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840102.463:65870): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=484051 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840102.525:65871): pid=484051 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840102.525:65872): pid=484051 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840102.526:65873): pid=484051 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840102.529:65874): pid=484051 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840102.532:65875): pid=484051 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840102.533:65876): pid=484051 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840102.537:65877): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840102.537:65878): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840102.541:65879): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840102.541:65880): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840102.542:65881): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=484066 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840102.604:65882): pid=484066 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840102.604:65883): pid=484066 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=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 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840102.605:65884): pid=484066 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840102.607:65885): pid=484066 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=BPF msg=audit(1771840103.188:65886): prog-id=2349 op=LOAD
type=SYSCALL msg=audit(1771840103.188:65886): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffec7728a00 a2=90 a3=9500000000 items=0 ppid=484115 pid=484116 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=228 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="ceph-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1771840103.188:65886): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F633062336431356537343566316364373435623833376265656463643930
type=BPF msg=audit(1771840103.242:65887): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1771840103.407:65888): pid=484066 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840103.407:65889): pid=484066 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840103.413:65890): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840103.413:65891): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840105.290:65892): pid=484138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=484138 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771840105.292:65893): pid=484137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=484138 suid=74 rport=33626 laddr=192.168.122.105 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771840105.292:65894): pid=484137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=484138 suid=74 rport=33626 laddr=192.168.122.105 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1771840105.373:65895): pid=484137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="tripleo-admin" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771840105.373:65896): pid=484137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:fd:28:52:d8:9e:43:ab:ba:3d:3f:9f:5e:fc:d9:a0:40:e4:52:01:c2:4e:07:0b:b8:e8:7b:a8:d3:71:c1:74:1e exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1771840105.403:65897): pid=484137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771840105.404:65898): pid=484137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=484138 suid=74 rport=33626 laddr=192.168.122.105 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1771840105.406:65899): pid=484137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="tripleo-admin" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1771840105.406:65900): pid=484137 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1003 tty=(none) old-ses=4294967295 ses=229 res=1UID="root" OLD-AUID="unset" AUID="tripleo-admin"
type=SYSCALL msg=audit(1771840105.406:65900): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffcf416af30 a2=4 a3=3eb items=0 ppid=416325 pid=484137 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=229 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1771840105.406:65900): proctitle=737368643A20747269706C656F2D61646D696E205B707269765D
type=USER_ROLE_CHANGE msg=audit(1771840105.407:65901): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1771840105.451:65902): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@1003 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1771840105.478:65903): pid=484141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_ACQ msg=audit(1771840105.478:65904): pid=484141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="tripleo-admin" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_ROLE_CHANGE msg=audit(1771840105.479:65905): pid=484141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1771840105.480:65906): pid=484141 uid=0 subj=system_u:system_r:init_t:s0 old-auid=4294967295 auid=1003 tty=(none) old-ses=4294967295 ses=230 res=1UID="root" OLD-AUID="unset" AUID="tripleo-admin"
type=SYSCALL msg=audit(1771840105.480:65906): arch=c000003e syscall=1 success=yes exit=4 a0=7 a1=7ffdc1fc8400 a2=4 a3=3eb items=0 ppid=1 pid=484141 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=230 comm="(systemd)" exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null)ARCH=x86_64 SYSCALL=write AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1771840105.480:65906): proctitle="(systemd)"
type=USER_START msg=audit(1771840105.482:65907): pid=484141 uid=0 auid=1003 ses=230 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="tripleo-admin" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1771840105.673:65908): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1003 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1771840105.694:65909): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="tripleo-admin" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1771840105.696:65910): pid=484156 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=484156 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="root"
type=CRED_ACQ msg=audit(1771840105.697:65911): pid=484156 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="tripleo-admin" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin"
type=USER_LOGIN msg=audit(1771840105.740:65912): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1771840105.740:65913): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1771840105.742:65914): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=484157 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1771840105.776:65915): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1771840105.776:65916): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1771840105.786:65917): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1771840105.786:65918): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1771840105.788:65919): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=484170 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1771840105.828:65920): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1771840105.828:65921): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1771840105.841:65922): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1771840105.841:65923): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1771840105.843:65924): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=484189 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1771840105.876:65925): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1771840105.877:65926): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1771840105.888:65927): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1771840105.888:65928): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1771840105.890:65929): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=484204 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1771840105.980:65930): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1771840105.980:65931): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1771840106.000:65932): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1771840106.000:65933): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1771840106.002:65934): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=484218 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1771840106.047:65935): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1771840106.048:65936): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1771840106.063:65937): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1771840106.063:65938): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1771840106.065:65939): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=484231 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1771840106.099:65940): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1771840106.099:65941): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1771840106.117:65942): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1771840106.118:65943): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1771840106.120:65944): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=484245 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1771840106.330:65945): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1771840106.331:65946): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1771840106.347:65947): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1771840106.347:65948): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1771840106.349:65949): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=484261 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1771840106.382:65950): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1771840106.382:65951): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1771840106.429:65952): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1771840106.429:65953): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1771840106.431:65954): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=484275 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1771840106.461:65955): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1771840106.461:65956): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1771840106.471:65957): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1771840106.471:65958): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1771840106.473:65959): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=484288 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1771840106.509:65960): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1771840106.510:65961): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1771840106.522:65962): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1771840106.522:65963): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1771840106.524:65964): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=484307 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1771840106.558:65965): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1771840106.558:65966): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1771840106.568:65967): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1771840106.569:65968): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1771840106.570:65969): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=484322 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1771840106.650:65970): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1771840106.650:65971): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1771840106.665:65972): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1771840106.665:65973): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1771840106.667:65974): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=484336 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1771840106.719:65975): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1771840106.719:65976): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1771840106.731:65977): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1771840106.731:65978): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1771840106.733:65979): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=484349 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1771840106.763:65980): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1771840106.764:65981): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1771840106.776:65982): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1771840106.776:65983): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1771840106.778:65984): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=484363 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1771840106.945:65985): pid=484380 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=484380 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771840106.947:65986): pid=484369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=484380 suid=74 rport=56928 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771840106.947:65987): pid=484369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=484380 suid=74 rport=56928 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_END msg=audit(1771840107.034:65988): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1771840107.034:65989): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1771840107.050:65990): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1771840107.050:65991): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1771840107.052:65992): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=484381 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1771840107.085:65993): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1771840107.085:65994): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1771840107.113:65995): pid=484369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=484369 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771840107.113:65996): pid=484369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1771840107.151:65997): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1771840107.151:65998): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1771840107.153:65999): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=484395 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1771840107.184:66000): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1771840107.184:66001): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1771840107.196:66002): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1771840107.196:66003): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1771840107.197:66004): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=484408 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1771840107.234:66005): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1771840107.234:66006): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1771840107.246:66007): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1771840107.246:66008): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1771840107.248:66009): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=484427 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1771840107.279:66010): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1771840107.279:66011): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1771840107.288:66012): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1771840107.288:66013): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1771840107.289:66014): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=484442 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1771840107.374:66015): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1771840107.374:66016): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1771840107.388:66017): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1771840107.388:66018): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1771840107.390:66019): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=484456 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1771840107.439:66020): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1771840107.439:66021): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1771840107.456:66022): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1771840107.456:66023): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1771840107.457:66024): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=484469 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1771840107.490:66025): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1771840107.490:66026): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1771840107.503:66027): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1771840107.503:66028): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1771840107.505:66029): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=484483 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1771840107.574:66030): pid=484498 uid=1003 auid=1003 ses=229 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1771840107.574:66031): pid=484498 uid=1003 auid=1003 ses=229 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A7778716A65776676786B7367737867717975756E636177676E666671677A6B203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313737313834303130372E313836323730352D36333735392D32303136363035333938323333392F416E736962616C6C5A5F636F70792E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1771840107.575:66032): pid=484498 uid=1003 auid=1003 ses=229 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1771840107.580:66033): pid=484498 uid=1003 auid=1003 ses=229 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1771840107.755:66034): pid=484498 uid=1003 auid=1003 ses=229 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1771840107.755:66035): pid=484498 uid=1003 auid=1003 ses=229 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1771840107.760:66036): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1771840107.760:66037): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1771840107.771:66038): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1771840107.772:66039): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1771840107.773:66040): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=484501 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1771840107.807:66041): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1771840107.807:66042): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1771840107.846:66043): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1771840107.847:66044): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1771840107.849:66045): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=484515 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1771840107.881:66046): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1771840107.881:66047): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1771840107.896:66048): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1771840107.896:66049): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1771840107.897:66050): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=484528 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1771840107.934:66051): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1771840107.934:66052): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1771840107.948:66053): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1771840107.948:66054): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1771840107.949:66055): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=484547 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1771840107.982:66056): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1771840107.982:66057): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1771840107.992:66058): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1771840107.992:66059): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1771840107.994:66060): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=484562 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1771840108.081:66061): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1771840108.082:66062): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1771840108.096:66063): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1771840108.097:66064): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1771840108.098:66065): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=484576 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1771840108.144:66066): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1771840108.145:66067): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1771840108.155:66068): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1771840108.155:66069): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1771840108.157:66070): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=484589 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1771840108.188:66071): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1771840108.188:66072): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1771840108.206:66073): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1771840108.206:66074): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1771840108.209:66075): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=484603 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1771840108.275:66076): pid=484618 uid=1003 auid=1003 ses=229 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1771840108.275:66077): pid=484618 uid=1003 auid=1003 ses=229 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D64636D716E67727077756769746B75756E646279717973666A76666E77787863203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313737313834303130372E3838333531342D36333735392D3230393138393332363336303039362F416E736962616C6C5A5F636F70792E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1771840108.276:66078): pid=484618 uid=1003 auid=1003 ses=229 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1771840108.279:66079): pid=484618 uid=1003 auid=1003 ses=229 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1771840108.482:66080): pid=484618 uid=1003 auid=1003 ses=229 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1771840108.483:66081): pid=484618 uid=1003 auid=1003 ses=229 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1771840108.488:66082): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1771840108.488:66083): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1771840108.507:66084): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1771840108.507:66085): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1771840108.509:66086): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=484624 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1771840108.539:66087): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1771840108.539:66088): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_START msg=audit(1771840113.031:66089): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840113.035:66090): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840113.260:66091): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840113.313:66092): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1771840114.469:66093): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1771840114.469:66094): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1771840114.472:66095): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=484682 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1771840114.507:66096): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1771840114.507:66097): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1771840114.522:66098): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1771840114.522:66099): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1771840114.524:66100): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=484695 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1771840114.563:66101): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1771840114.563:66102): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1771840114.579:66103): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1771840114.579:66104): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1771840114.580:66105): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=484714 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1771840114.615:66106): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1771840114.615:66107): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1771840114.629:66108): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1771840114.629:66109): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1771840114.630:66110): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=484729 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1771840114.719:66111): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1771840114.719:66112): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1771840114.738:66113): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1771840114.738:66114): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1771840114.739:66115): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=484743 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1771840114.792:66116): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1771840114.792:66117): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1771840114.803:66118): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1771840114.803:66119): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1771840114.805:66120): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=484756 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1771840114.836:66121): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1771840114.836:66122): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1771840114.847:66123): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1771840114.847:66124): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1771840114.850:66125): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=484770 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1771840114.918:66126): pid=484785 uid=1003 auid=1003 ses=229 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1771840114.919:66127): pid=484785 uid=1003 auid=1003 ses=229 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7171786761716277736A6A736569697669746E69647A73746E70737766686E6E203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313737313834303131342E353039333132322D36333831312D3236353334333037353030303835392F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1771840114.921:66128): pid=484785 uid=1003 auid=1003 ses=229 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1771840114.925:66129): pid=484785 uid=1003 auid=1003 ses=229 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1771840115.260:66130): prog-id=2350 op=LOAD
type=SYSCALL msg=audit(1771840115.260:66130): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc3e3d9640 a2=90 a3=9500000000 items=0 ppid=484802 pid=484803 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=229 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1771840115.260:66130): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F616664613533313462343932623031353736613139656164336463633833
type=USER_LOGIN msg=audit(1771840115.639:66131): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840115.639:66132): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840115.641:66133): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=484826 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840115.701:66134): pid=484826 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840115.701:66135): pid=484826 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840115.702:66136): pid=484826 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840115.706:66137): pid=484826 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840115.709:66138): pid=484826 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840115.710:66139): pid=484826 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840115.713:66140): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840115.713:66141): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840115.715:66142): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840115.715:66143): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840115.735:66144): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=484847 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840115.799:66145): pid=484847 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840115.800:66146): pid=484847 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6365706861646D2E64343332396666306235383338396131633837343432376536666138636461646332353435303739313137633737343464643965646634613365346663383366202D2D696D6167652072656769737472792E7265646861742E696F2F7268636570682F7268636570682D372D7268656C393A6C6174657374202D2D74696D656F75742038393520726D2D6461656D6F6E202D2D667369642066316665613337312D636236392D353738642D613364302D623563343732613834623436202D2D6E616D65206D6F6E2E6E7030303035363236343631202D2D666F726365 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840115.800:66147): pid=484847 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=BPF msg=audit(1771840115.809:66148): prog-id=0 op=UNLOAD
type=USER_START msg=audit(1771840115.810:66149): pid=484847 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=SERVICE_STOP msg=audit(1771840116.960:66150): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ceph-f1fea371-cb69-578d-a3d0-b5c472a84b46@mon.np0005626461 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1771840117.358:66151): prog-id=2351 op=LOAD
type=BPF msg=audit(1771840117.358:66152): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771840117.362:66153): prog-id=2352 op=LOAD
type=BPF msg=audit(1771840117.362:66154): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771840117.362:66155): prog-id=2353 op=LOAD
type=BPF msg=audit(1771840117.362:66156): prog-id=2354 op=LOAD
type=BPF msg=audit(1771840117.362:66157): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771840117.362:66158): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771840117.366:66159): prog-id=2355 op=LOAD
type=BPF msg=audit(1771840117.366:66160): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771840117.366:66161): prog-id=2356 op=LOAD
type=BPF msg=audit(1771840117.366:66162): prog-id=2357 op=LOAD
type=BPF msg=audit(1771840117.366:66163): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771840117.366:66164): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771840117.373:66165): prog-id=2358 op=LOAD
type=BPF msg=audit(1771840117.373:66166): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771840117.375:66167): prog-id=2359 op=LOAD
type=BPF msg=audit(1771840117.375:66168): prog-id=2360 op=LOAD
type=BPF msg=audit(1771840117.375:66169): prog-id=0 op=UNLOAD
type=BPF msg=audit(1771840117.375:66170): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1771840117.411:66171): pid=484847 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840117.411:66172): pid=484847 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840117.418:66173): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840117.418:66174): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=BPF msg=audit(1771840117.461:66175): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1771840117.579:66176): pid=484785 uid=1003 auid=1003 ses=229 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1771840117.579:66177): pid=484785 uid=1003 auid=1003 ses=229 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1771840117.585:66178): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1771840117.585:66179): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1771840117.596:66180): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1771840117.596:66181): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1771840117.598:66182): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=485027 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1771840117.634:66183): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1771840117.634:66184): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1771840117.682:66185): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840117.683:66186): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840117.685:66187): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=485041 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840117.750:66188): pid=485041 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840117.750:66189): pid=485041 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F6574632F63657068 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840117.751:66190): pid=485041 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840117.757:66191): pid=485041 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840117.761:66192): pid=485041 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840117.761:66193): pid=485041 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840117.769:66194): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840117.769:66195): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840117.776:66196): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840117.776:66197): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840117.778:66198): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=485056 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840117.840:66199): pid=485056 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840117.840:66200): pid=485056 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6574632F63657068 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840117.842:66201): pid=485056 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840117.845:66202): pid=485056 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840117.848:66203): pid=485056 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840117.848:66204): pid=485056 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840117.853:66205): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840117.853:66206): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840117.856:66207): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840117.856:66208): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840117.858:66209): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=485071 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840117.918:66210): pid=485071 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840117.918:66211): pid=485071 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=746F756368202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840117.919:66212): pid=485071 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840117.921:66213): pid=485071 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840117.924:66214): pid=485071 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840117.924:66215): pid=485071 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840117.929:66216): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840117.929:66217): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840117.933:66218): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840117.933:66219): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840117.935:66220): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=485086 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840117.997:66221): pid=485086 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840117.998:66222): pid=485086 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220636570682D61646D696E202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D623563343732613834623436 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840117.998:66223): pid=485086 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840118.001:66224): pid=485086 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840118.004:66225): pid=485086 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840118.004:66226): pid=485086 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840118.009:66227): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840118.010:66228): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840118.013:66229): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840118.013:66230): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840118.015:66231): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=485101 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840118.076:66232): pid=485101 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840118.076:66233): pid=485101 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840118.077:66234): pid=485101 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840118.079:66235): pid=485101 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840118.082:66236): pid=485101 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840118.082:66237): pid=485101 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840118.088:66238): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840118.089:66239): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840118.096:66240): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840118.096:66241): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840118.098:66242): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=485116 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_END msg=audit(1771840118.149:66243): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840118.150:66244): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840118.151:66245): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840118.151:66246): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840118.153:66247): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=485129 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840118.212:66248): pid=485129 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840118.213:66249): pid=485129 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220303A30202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840118.213:66250): pid=485129 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840118.216:66251): pid=485129 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840118.221:66252): pid=485129 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840118.222:66253): pid=485129 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840118.226:66254): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840118.226:66255): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840118.229:66256): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840118.229:66257): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840118.230:66258): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=485144 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840118.290:66259): pid=485144 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840118.290:66260): pid=485144 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840118.291:66261): pid=485144 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840118.294:66262): pid=485144 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840118.297:66263): pid=485144 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840118.297:66264): pid=485144 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840118.301:66265): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840118.301:66266): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840118.305:66267): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840118.305:66268): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840118.307:66269): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=485159 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840118.368:66270): pid=485159 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840118.368:66271): pid=485159 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D76202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F6574632F636570682F636570682E636F6E662E6E6577202F6574632F636570682F636570682E636F6E66 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840118.369:66272): pid=485159 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840118.371:66273): pid=485159 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840118.374:66274): pid=485159 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840118.374:66275): pid=485159 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840118.378:66276): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840118.378:66277): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840118.382:66278): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840118.382:66279): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840118.384:66280): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=485174 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840118.444:66281): pid=485174 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840118.444:66282): pid=485174 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E666967 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840118.445:66283): pid=485174 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840118.448:66284): pid=485174 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840118.451:66285): pid=485174 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840118.451:66286): pid=485174 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840118.457:66287): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840118.457:66288): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840118.457:66289): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840118.457:66290): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840118.459:66291): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=485189 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840118.520:66292): pid=485189 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840118.520:66293): pid=485189 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E666967 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840118.521:66294): pid=485189 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840118.523:66295): pid=485189 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840118.526:66296): pid=485189 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840118.526:66297): pid=485189 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840118.530:66298): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840118.530:66299): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840118.533:66300): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840118.533:66301): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840118.535:66302): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=485204 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840118.596:66303): pid=485204 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840118.596:66304): pid=485204 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=746F756368202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840118.597:66305): pid=485204 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840118.599:66306): pid=485204 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840118.605:66307): pid=485204 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840118.605:66308): pid=485204 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840118.609:66309): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840118.610:66310): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840118.612:66311): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840118.612:66312): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840118.614:66313): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=485219 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840118.684:66314): pid=485219 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840118.684:66315): pid=485219 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220636570682D61646D696E202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D623563343732613834623436 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840118.685:66316): pid=485219 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840118.687:66317): pid=485219 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840118.692:66318): pid=485219 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840118.692:66319): pid=485219 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840118.697:66320): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840118.697:66321): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840118.699:66322): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840118.699:66323): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840118.701:66324): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=485234 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840118.762:66325): pid=485234 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840118.763:66326): pid=485234 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840118.763:66327): pid=485234 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840118.766:66328): pid=485234 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840118.769:66329): pid=485234 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840118.769:66330): pid=485234 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840118.775:66331): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840118.775:66332): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840118.779:66333): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840118.779:66334): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840118.781:66335): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=485249 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_END msg=audit(1771840118.831:66336): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840118.831:66337): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840118.832:66338): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840118.833:66339): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840118.834:66340): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=485262 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840118.896:66341): pid=485262 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840118.896:66342): pid=485262 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220303A30202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840118.897:66343): pid=485262 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840118.899:66344): pid=485262 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840118.904:66345): pid=485262 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840118.905:66346): pid=485262 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840118.909:66347): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840118.909:66348): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840118.912:66349): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840118.912:66350): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840118.913:66351): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=485277 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840118.967:66352): pid=485277 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840118.967:66353): pid=485277 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840118.967:66354): pid=485277 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840118.972:66355): pid=485277 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840118.974:66356): pid=485277 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840118.974:66357): pid=485277 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840118.978:66358): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840118.978:66359): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840118.984:66360): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840118.984:66361): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840118.985:66362): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=485292 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840119.047:66363): pid=485292 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840119.047:66364): pid=485292 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D76202F746D702F6365706861646D2D66316665613337312D636236392D353738642D613364302D6235633437326138346234362F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E6669672F636570682E636F6E662E6E6577202F7661722F6C69622F636570682F66316665613337312D636236392D353738642D613364302D6235633437326138346234362F636F6E6669672F636570682E636F6E66 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840119.048:66365): pid=485292 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840119.050:66366): pid=485292 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840119.054:66367): pid=485292 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840119.054:66368): pid=485292 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840119.060:66369): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840119.060:66370): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840119.138:66371): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840119.138:66372): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840119.140:66373): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=485307 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840119.201:66374): pid=485307 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840119.201:66375): pid=485307 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840119.202:66376): pid=485307 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840119.204:66377): pid=485307 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840119.208:66378): pid=485307 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840119.208:66379): pid=485307 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840119.212:66380): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840119.212:66381): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1771840124.028:66382): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1771840124.284:66383): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840124.284:66384): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840124.286:66385): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=485390 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=SERVICE_STOP msg=audit(1771840124.303:66386): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1771840124.351:66387): pid=485390 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840124.351:66388): pid=485390 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840124.352:66389): pid=485390 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840124.363:66390): pid=485390 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840124.366:66391): pid=485390 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840124.366:66392): pid=485390 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840124.371:66393): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840124.371:66394): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840124.375:66395): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840124.375:66396): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840124.376:66397): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=485406 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840124.402:66398): pid=485417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=485417 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_ACCT msg=audit(1771840124.439:66399): pid=485406 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840124.439:66400): pid=485406 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=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 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840124.440:66401): pid=485406 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840124.443:66402): pid=485406 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRYPTO_SESSION msg=audit(1771840124.519:66403): pid=485404 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=485417 suid=74 rport=45348 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771840124.519:66404): pid=485404 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=485417 suid=74 rport=45348 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771840124.598:66405): pid=485404 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=485404 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771840124.598:66406): pid=485404 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=ssh res=failed'UID="root" AUID="unset"
type=BPF msg=audit(1771840125.021:66407): prog-id=2361 op=LOAD
type=SYSCALL msg=audit(1771840125.021:66407): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffdc86e8bd0 a2=90 a3=9500000000 items=0 ppid=485455 pid=485456 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=228 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="ceph-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1771840125.021:66407): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F653932333862336464623533393161396534666133666661326562306437
type=BPF msg=audit(1771840125.078:66408): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1771840125.220:66409): pid=485406 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840125.220:66410): pid=485406 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840125.226:66411): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840125.226:66412): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840125.261:66413): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840125.261:66414): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840125.263:66415): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=485476 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840125.324:66416): pid=485476 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840125.324:66417): pid=485476 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840125.325:66418): pid=485476 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840125.332:66419): pid=485476 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840125.334:66420): pid=485476 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840125.334:66421): pid=485476 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840125.338:66422): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840125.338:66423): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1771840125.341:66424): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1771840125.341:66425): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840125.343:66426): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=485491 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1771840125.404:66427): pid=485491 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1771840125.404:66428): pid=485491 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=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 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1771840125.405:66429): pid=485491 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1771840125.408:66430): pid=485491 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=BPF msg=audit(1771840125.953:66431): prog-id=2362 op=LOAD
type=SYSCALL msg=audit(1771840125.953:66431): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fffab041f30 a2=90 a3=9500000000 items=0 ppid=485539 pid=485540 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=228 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="ceph-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1771840125.953:66431): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F353033373039306264383439383732663937656636623936396464653666
type=BPF msg=audit(1771840125.998:66432): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1771840126.162:66433): pid=485491 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840126.162:66434): pid=485491 uid=1002 auid=1002 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1771840126.167:66435): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1771840126.167:66436): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1771840129.035:66437): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840129.040:66438): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840129.044:66439): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840129.048:66440): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840129.052:66441): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840129.402:66442): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840129.458:66443): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840129.524:66444): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840129.553:66445): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840129.555:66446): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1771840136.234:66447): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1771840136.234:66448): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1771840136.236:66449): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=485709 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1771840136.270:66450): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1771840136.270:66451): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1771840136.286:66452): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1771840136.286:66453): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1771840136.287:66454): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=485722 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1771840136.324:66455): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1771840136.324:66456): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1771840136.341:66457): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1771840136.341:66458): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1771840136.342:66459): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=485741 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1771840136.374:66460): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1771840136.374:66461): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1771840136.386:66462): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1771840136.386:66463): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1771840136.387:66464): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=485756 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1771840136.457:66465): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1771840136.458:66466): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1771840136.478:66467): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1771840136.478:66468): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1771840136.479:66469): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=485770 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1771840136.532:66470): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1771840136.532:66471): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1771840136.548:66472): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1771840136.548:66473): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1771840136.550:66474): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=485783 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1771840136.582:66475): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1771840136.582:66476): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1771840136.597:66477): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1771840136.597:66478): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1771840136.600:66479): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=485797 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1771840136.671:66480): pid=485812 uid=1003 auid=1003 ses=229 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1771840136.671:66481): pid=485812 uid=1003 auid=1003 ses=229 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D66797862647769786F706776686F61746667616A716F6C766572686E6D6C6564203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313737313834303133362E323732313737352D36333835362D3232333932313431393833343131342F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1771840136.673:66482): pid=485812 uid=1003 auid=1003 ses=229 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1771840136.679:66483): pid=485812 uid=1003 auid=1003 ses=229 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1771840137.055:66484): prog-id=2363 op=LOAD
type=SYSCALL msg=audit(1771840137.055:66484): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffe18819f30 a2=90 a3=9500000000 items=0 ppid=485830 pid=485831 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=229 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1771840137.055:66484): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F316136386430613230303066646361613362393130336362646664306362
type=BPF msg=audit(1771840137.540:66485): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1771840137.643:66486): pid=485812 uid=1003 auid=1003 ses=229 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1771840137.643:66487): pid=485812 uid=1003 auid=1003 ses=229 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1771840137.649:66488): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1771840137.649:66489): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1771840137.668:66490): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1771840137.668:66491): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1771840137.671:66492): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=485869 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1771840137.709:66493): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1771840137.709:66494): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1771840140.126:66495): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=483012 suid=1002 rport=52066 laddr=192.168.122.105 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840140.127:66496): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=483012 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_END msg=audit(1771840140.131:66497): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.106 addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=CRED_DISP msg=audit(1771840140.131:66498): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.106 addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1771840140.131:66499): pid=483009 uid=0 auid=1002 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=483009 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="root"
type=USER_LOGIN msg=audit(1771840140.526:66500): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1771840140.526:66501): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1771840140.528:66502): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=485883 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1771840140.559:66503): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1771840140.560:66504): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1771840140.572:66505): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1771840140.572:66506): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1771840140.574:66507): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=485896 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1771840140.609:66508): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1771840140.609:66509): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1771840140.628:66510): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1771840140.628:66511): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1771840140.630:66512): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=485915 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1771840140.659:66513): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1771840140.660:66514): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1771840140.672:66515): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1771840140.672:66516): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1771840140.673:66517): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=485930 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1771840140.764:66518): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1771840140.764:66519): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1771840140.781:66520): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1771840140.781:66521): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1771840140.783:66522): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=485944 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1771840140.830:66523): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1771840140.830:66524): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1771840140.844:66525): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1771840140.844:66526): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1771840140.845:66527): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=485957 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1771840140.876:66528): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1771840140.876:66529): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1771840140.891:66530): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1771840140.891:66531): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1771840140.922:66532): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=485971 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1771840140.987:66533): pid=485986 uid=1003 auid=1003 ses=229 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1771840140.987:66534): pid=485986 uid=1003 auid=1003 ses=229 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D677A6D6E72657767696C7466707064656D71646D636E6868787169766C696B63203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313737313834303134302E3536313931342D36333839352D34313639303934393438383630322F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1771840140.988:66535): pid=485986 uid=1003 auid=1003 ses=229 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1771840140.993:66536): pid=485986 uid=1003 auid=1003 ses=229 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1771840141.211:66537): pid=485986 uid=1003 auid=1003 ses=229 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1771840141.212:66538): pid=485986 uid=1003 auid=1003 ses=229 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1771840141.216:66539): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1771840141.216:66540): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1771840141.235:66541): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1771840141.235:66542): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1771840141.237:66543): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=485991 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1771840141.269:66544): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1771840141.269:66545): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1771840141.381:66546): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1771840141.381:66547): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1771840141.382:66548): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=486005 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1771840141.413:66549): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1771840141.413:66550): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1771840141.429:66551): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1771840141.429:66552): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1771840141.431:66553): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=486018 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1771840141.468:66554): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1771840141.468:66555): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1771840141.495:66556): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1771840141.495:66557): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1771840141.496:66558): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=486037 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1771840141.529:66559): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1771840141.529:66560): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1771840141.545:66561): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1771840141.545:66562): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1771840141.546:66563): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=486052 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1771840141.634:66564): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1771840141.634:66565): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1771840141.655:66566): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1771840141.655:66567): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1771840141.656:66568): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=486066 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1771840141.710:66569): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1771840141.711:66570): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1771840141.725:66571): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1771840141.725:66572): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1771840141.726:66573): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=486079 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1771840141.758:66574): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1771840141.758:66575): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1771840141.774:66576): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1771840141.774:66577): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1771840141.776:66578): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=486093 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1771840141.844:66579): pid=486108 uid=1003 auid=1003 ses=229 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1771840141.844:66580): pid=486108 uid=1003 auid=1003 ses=229 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D676F63727375776878617069726570796D7A6F776B76777267717371707379203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313737313834303134312E343135373435372D36333930382D3136303730383933323535333733332F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1771840141.845:66581): pid=486108 uid=1003 auid=1003 ses=229 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1771840141.848:66582): pid=486108 uid=1003 auid=1003 ses=229 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1771840142.025:66583): pid=486108 uid=1003 auid=1003 ses=229 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1771840142.025:66584): pid=486108 uid=1003 auid=1003 ses=229 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1771840142.030:66585): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1771840142.030:66586): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1771840142.041:66587): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1771840142.041:66588): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1771840142.042:66589): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=486112 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1771840142.074:66590): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1771840142.074:66591): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_START msg=audit(1771840144.023:66592): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840144.027:66593): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840144.264:66594): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840144.313:66595): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840150.281:66596): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1002 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840150.327:66597): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@1002 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771840151.662:66598): pid=486173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=486173 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771840151.804:66599): pid=486172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=486173 suid=74 rport=41852 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=80.94.92.182 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771840151.804:66600): pid=486172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=486173 suid=74 rport=41852 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=80.94.92.182 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771840152.522:66601): pid=486172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=486173 suid=74 rport=41852 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=80.94.92.182 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771840152.522:66602): pid=486172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=486173 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1771840152.523:66603): pid=486172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=80.94.92.182 addr=80.94.92.182 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771840152.524:66604): pid=486172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=486172 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771840152.524:66605): pid=486172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=80.94.92.182 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840155.026:66606): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840155.257:66607): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840160.205:66608): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840160.207:66609): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840160.212:66610): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840160.217:66611): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840160.221:66612): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771840160.380:66613): pid=486287 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=486287 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771840160.471:66614): pid=486257 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=486287 suid=74 rport=37776 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771840160.471:66615): pid=486257 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=486287 suid=74 rport=37776 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771840160.478:66616): pid=486257 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=486257 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771840160.478:66617): pid=486257 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840160.546:66618): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840160.569:66619): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840160.593:66620): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840160.596:66621): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840160.624:66622): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840175.031:66623): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840175.035:66624): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840175.169:66625): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840175.296:66626): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771840184.946:66627): pid=486431 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=486431 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771840185.035:66628): pid=486430 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=486431 suid=74 rport=39996 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771840185.035:66629): pid=486430 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=486431 suid=74 rport=39996 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771840185.128:66630): pid=486430 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=486430 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771840185.128:66631): pid=486430 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840186.028:66632): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840186.284:66633): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840190.891:66634): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840190.895:66635): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840190.899:66636): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840190.903:66637): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840190.908:66638): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840191.112:66639): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840191.252:66640): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840191.278:66641): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840191.323:66642): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840191.434:66643): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771840201.472:66644): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=484156 suid=1003 rport=33626 laddr=192.168.122.105 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1771840201.473:66645): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=484156 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1771840201.477:66646): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="tripleo-admin" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1771840201.478:66647): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="tripleo-admin" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1771840201.479:66648): pid=484137 uid=0 auid=1003 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=484137 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="root"
type=SERVICE_START msg=audit(1771840206.026:66649): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840206.030:66650): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840206.188:66651): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840206.284:66652): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840211.528:66653): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1003 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840211.564:66654): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@1003 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771840214.919:66655): pid=486654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=486654 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771840215.000:66656): pid=486653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=486654 suid=74 rport=50790 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771840215.001:66657): pid=486653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=486654 suid=74 rport=50790 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771840215.092:66658): pid=486653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=486653 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771840215.093:66659): pid=486653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840217.026:66660): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840217.287:66661): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840222.025:66662): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840222.029:66663): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840222.032:66664): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840222.036:66665): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840222.040:66666): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840222.372:66667): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840222.377:66668): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840222.470:66669): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840222.496:66670): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771840222.499:66671): pid=486810 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=486810 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=SERVICE_STOP msg=audit(1771840222.526:66672): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840237.031:66673): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840237.036:66674): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840237.188:66675): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840237.269:66676): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771840247.471:66677): pid=486911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=486911 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771840247.558:66678): pid=486910 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=486911 suid=74 rport=36532 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771840247.558:66679): pid=486910 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=486911 suid=74 rport=36532 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771840247.653:66680): pid=486910 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=486910 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771840247.654:66681): pid=486910 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840247.672:66682): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840247.905:66683): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840253.031:66684): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840253.037:66685): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840253.041:66686): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840253.045:66687): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840253.049:66688): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840253.319:66689): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840253.379:66690): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840253.410:66691): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840253.554:66692): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840253.583:66693): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840268.027:66694): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840268.031:66695): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840268.430:66696): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840268.486:66697): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771840270.437:66698): pid=487142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=487142 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771840270.502:66699): pid=487141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=487142 suid=74 rport=36736 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771840270.502:66700): pid=487141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=487142 suid=74 rport=36736 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771840270.584:66701): pid=487141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=487141 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771840270.584:66702): pid=487141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771840275.792:66703): pid=487150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=487150 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=SERVICE_START msg=audit(1771840278.027:66704): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840278.247:66705): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840284.029:66706): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840284.033:66707): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840284.037:66708): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840284.041:66709): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840284.046:66710): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840284.372:66711): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840284.374:66712): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840284.407:66713): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840284.469:66714): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840284.564:66715): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771840289.540:66716): pid=487328 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=487328 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771840289.622:66717): pid=487327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=487328 suid=74 rport=52752 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.103.151 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771840289.622:66718): pid=487327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=487328 suid=74 rport=52752 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.103.151 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771840289.759:66719): pid=487327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=487327 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771840289.759:66720): pid=487327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=209.38.103.151 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840299.025:66721): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840299.029:66722): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840299.217:66723): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840299.243:66724): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771840306.210:66725): pid=487411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=487411 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771840306.298:66726): pid=487410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=487411 suid=74 rport=40148 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771840306.298:66727): pid=487410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=487411 suid=74 rport=40148 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771840306.391:66728): pid=487410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=487410 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771840306.391:66729): pid=487410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840309.027:66730): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840309.273:66731): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840315.029:66732): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840315.033:66733): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840315.038:66734): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840315.042:66735): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840315.048:66736): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840315.371:66737): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840315.393:66738): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840315.415:66739): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840315.447:66740): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840315.462:66741): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771840329.603:66742): pid=487590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=487590 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771840329.683:66743): pid=487589 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=487590 suid=74 rport=54614 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771840329.684:66744): pid=487589 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=487590 suid=74 rport=54614 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771840329.774:66745): pid=487589 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=487589 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771840329.774:66746): pid=487589 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840329.792:66747): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840329.796:66748): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840330.028:66749): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840330.053:66750): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771840331.927:66751): pid=487632 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=487632 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771840332.009:66752): pid=487631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=487632 suid=74 rport=37008 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.103.151 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771840332.009:66753): pid=487631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=487632 suid=74 rport=37008 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.103.151 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771840332.101:66754): pid=487631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=487631 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771840332.102:66755): pid=487631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=209.38.103.151 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840340.031:66756): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840340.287:66757): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840346.028:66758): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840346.031:66759): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840346.035:66760): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840346.039:66761): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840346.043:66762): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840346.397:66763): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840346.420:66764): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840346.443:66765): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840346.519:66766): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840346.529:66767): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840361.023:66768): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840361.027:66769): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840361.179:66770): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840361.268:66771): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771840364.601:66772): pid=487888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=487888 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771840364.727:66773): pid=487887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=487888 suid=74 rport=31392 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=185.156.73.233 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771840364.727:66774): pid=487887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=487888 suid=74 rport=31392 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=185.156.73.233 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771840365.380:66775): pid=487887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=487888 suid=74 rport=31392 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=185.156.73.233 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771840365.380:66776): pid=487887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=487888 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1771840365.381:66777): pid=487887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=185.156.73.233 addr=185.156.73.233 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771840365.382:66778): pid=487887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=487887 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771840365.382:66779): pid=487887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=185.156.73.233 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771840365.925:66780): pid=487890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=487890 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771840365.926:66781): pid=487889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=487890 suid=74 rport=53796 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771840365.927:66782): pid=487889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=487890 suid=74 rport=53796 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771840366.222:66783): pid=487889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=487889 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771840366.222:66784): pid=487889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840370.948:66785): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840371.180:66786): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771840373.332:66787): pid=487923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=487923 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771840373.422:66788): pid=487922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=487923 suid=74 rport=44270 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.103.151 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771840373.422:66789): pid=487922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=487923 suid=74 rport=44270 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.103.151 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771840373.509:66790): pid=487922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=487922 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771840373.510:66791): pid=487922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=209.38.103.151 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840377.027:66792): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840377.030:66793): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840377.033:66794): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840377.037:66795): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840377.041:66796): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840377.365:66797): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840377.384:66798): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840377.416:66799): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840377.437:66800): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840377.465:66801): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771840378.062:66802): pid=488068 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=488068 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771840378.063:66803): pid=488067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=488068 suid=74 rport=45028 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=80.94.92.182 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771840378.064:66804): pid=488067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=488068 suid=74 rport=45028 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=80.94.92.182 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771840379.051:66805): pid=488067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=488068 suid=74 rport=45028 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=80.94.92.182 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771840379.051:66806): pid=488067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=488068 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1771840379.052:66807): pid=488067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=80.94.92.182 addr=80.94.92.182 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771840379.052:66808): pid=488067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=488067 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771840379.052:66809): pid=488067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=80.94.92.182 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771840385.144:66810): pid=488070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=488070 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771840385.222:66811): pid=488069 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=488070 suid=74 rport=42382 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771840385.222:66812): pid=488069 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=488070 suid=74 rport=42382 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771840385.338:66813): pid=488069 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=488069 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771840385.338:66814): pid=488069 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840392.028:66815): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840392.032:66816): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840392.200:66817): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840392.288:66818): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840402.026:66819): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840402.286:66820): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840408.030:66821): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840408.034:66822): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840408.039:66823): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840408.042:66824): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840408.046:66825): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840408.350:66826): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840408.397:66827): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840408.442:66828): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840408.500:66829): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840408.542:66830): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771840413.331:66831): pid=488291 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=488291 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771840413.412:66832): pid=488290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=488291 suid=74 rport=51186 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.103.151 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771840413.412:66833): pid=488290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=488291 suid=74 rport=51186 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.103.151 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771840413.503:66834): pid=488290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=488290 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771840413.504:66835): pid=488290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=209.38.103.151 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840423.025:66836): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840423.030:66837): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840423.178:66838): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840423.241:66839): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771840428.956:66840): pid=488375 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=488375 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771840429.041:66841): pid=488374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=488375 suid=74 rport=50952 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771840429.041:66842): pid=488374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=488375 suid=74 rport=50952 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771840429.155:66843): pid=488374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=488374 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771840429.155:66844): pid=488374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840433.026:66845): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840433.306:66846): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771840437.747:66847): pid=488408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=488408 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771840437.969:66848): pid=488407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=488408 suid=74 rport=55464 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771840437.969:66849): pid=488407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=488408 suid=74 rport=55464 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771840438.028:66850): pid=488407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=488407 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771840438.028:66851): pid=488407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840439.028:66852): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840439.031:66853): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840439.034:66854): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840439.038:66855): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840439.043:66856): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840439.269:66857): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840439.292:66858): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840439.917:66859): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840439.970:66860): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840440.412:66861): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771840453.415:66862): pid=488552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=488552 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771840453.495:66863): pid=488551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=488552 suid=74 rport=44462 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.103.151 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771840453.495:66864): pid=488551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=488552 suid=74 rport=44462 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.103.151 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771840453.584:66865): pid=488551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=488551 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771840453.584:66866): pid=488551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=209.38.103.151 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840453.602:66867): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840453.606:66868): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840453.753:66869): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840453.899:66870): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840464.241:66871): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840464.463:66872): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840470.028:66873): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840470.032:66874): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840470.036:66875): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840470.040:66876): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840470.333:66877): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840470.362:66878): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840470.409:66879): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840470.427:66880): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840470.570:66881): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840470.775:66882): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840484.028:66883): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840484.032:66884): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840484.157:66885): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840484.320:66886): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771840486.600:66887): pid=488860 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=488860 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771840486.688:66888): pid=488859 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=488860 suid=74 rport=49542 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771840486.688:66889): pid=488859 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=488860 suid=74 rport=49542 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771840486.787:66890): pid=488859 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=488859 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771840486.787:66891): pid=488859 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771840490.300:66892): pid=488862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=488862 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771840490.301:66893): pid=488861 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=488862 suid=74 rport=34054 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771840490.301:66894): pid=488861 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=488862 suid=74 rport=34054 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771840490.481:66895): pid=488861 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=488861 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771840490.481:66896): pid=488861 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771840492.376:66897): pid=488864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=488864 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771840492.458:66898): pid=488863 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=488864 suid=74 rport=56112 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.103.151 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771840492.458:66899): pid=488863 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=488864 suid=74 rport=56112 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.103.151 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771840492.550:66900): pid=488863 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=488863 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771840492.550:66901): pid=488863 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=209.38.103.151 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840495.027:66902): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840495.292:66903): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840501.029:66904): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840501.033:66905): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840501.037:66906): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840501.041:66907): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840501.045:66908): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840501.317:66909): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840501.404:66910): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840501.434:66911): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840501.533:66912): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840501.618:66913): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840515.026:66914): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840515.031:66915): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840515.194:66916): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840515.276:66917): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840526.032:66918): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840526.307:66919): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840532.035:66920): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840532.039:66921): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840532.042:66922): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840532.045:66923): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840532.051:66924): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771840532.195:66925): pid=489182 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=489182 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771840532.275:66926): pid=489177 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=489182 suid=74 rport=55082 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.103.151 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771840532.275:66927): pid=489177 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=489182 suid=74 rport=55082 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.103.151 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_STOP msg=audit(1771840532.335:66928): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771840532.365:66929): pid=489177 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=489177 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771840532.365:66930): pid=489177 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=209.38.103.151 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840532.377:66931): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840532.471:66932): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840532.526:66933): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840532.608:66934): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771840544.125:66935): pid=489293 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=489293 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771840544.211:66936): pid=489292 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=489293 suid=74 rport=45464 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771840544.211:66937): pid=489292 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=489293 suid=74 rport=45464 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771840544.306:66938): pid=489292 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=489292 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771840544.307:66939): pid=489292 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771840545.307:66940): pid=489296 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=489296 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771840545.482:66941): pid=489295 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=489296 suid=74 rport=41244 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771840545.482:66942): pid=489295 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=489296 suid=74 rport=41244 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771840545.492:66943): pid=489295 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=489295 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771840545.492:66944): pid=489295 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840545.511:66945): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840545.516:66946): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840545.637:66947): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840545.791:66948): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771840548.273:66949): pid=489348 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=489348 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771840548.480:66950): pid=489347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=489348 suid=74 rport=45128 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=170.64.198.125 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771840548.480:66951): pid=489347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=489348 suid=74 rport=45128 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=170.64.198.125 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771840548.697:66952): pid=489347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=489347 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771840548.697:66953): pid=489347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=170.64.198.125 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840557.030:66954): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840557.315:66955): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840563.029:66956): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840563.032:66957): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840563.035:66958): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840563.040:66959): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840563.044:66960): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840563.335:66961): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840563.378:66962): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840563.435:66963): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840563.503:66964): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840563.601:66965): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771840572.486:66966): pid=489540 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=489540 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771840572.567:66967): pid=489539 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=489540 suid=74 rport=33838 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.103.151 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771840572.567:66968): pid=489539 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=489540 suid=74 rport=33838 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.103.151 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771840572.659:66969): pid=489539 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=489539 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771840572.659:66970): pid=489539 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=209.38.103.151 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840576.032:66971): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840576.035:66972): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840576.171:66973): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840576.257:66974): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840588.026:66975): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840588.240:66976): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1771840588.820:66977): pid=489616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_CMD msg=audit(1771840588.820:66978): pid=489616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E6620707269767365702D68656C706572202D2D636F6E6669672D66696C65202F6574632F6E657574726F6E2F6E657574726F6E2E636F6E66202D2D636F6E6669672D646972202F6574632F6E657574726F6E2E636F6E662E64202D2D707269767365705F636F6E74657874206E657574726F6E2E70726976696C656765642E64656661756C74202D2D707269767365705F736F636B5F70617468202F746D702F746D7034366F736867716D2F707269767365702E736F636B exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="unset"
type=CRED_REFR msg=audit(1771840588.821:66979): pid=489616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1771840588.822:66980): pid=489616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1771840589.429:66981): pid=489616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1771840589.430:66982): pid=489616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840594.026:66983): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840594.030:66984): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840594.035:66985): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840594.040:66986): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840594.049:66987): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840594.347:66988): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840594.428:66989): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840594.503:66990): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840594.560:66991): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840594.710:66992): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771840599.192:66993): pid=489766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=489766 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771840599.282:66994): pid=489765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=489766 suid=74 rport=55120 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771840599.282:66995): pid=489765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=489766 suid=74 rport=55120 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771840599.392:66996): pid=489765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=489765 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771840599.393:66997): pid=489765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771840599.627:66998): pid=489767 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=489767 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771840599.629:66999): pid=489764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=489767 suid=74 rport=48204 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=80.94.92.182 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771840599.629:67000): pid=489764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=489767 suid=74 rport=48204 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=80.94.92.182 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771840600.370:67001): pid=489764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=489767 suid=74 rport=48204 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=80.94.92.182 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771840600.370:67002): pid=489764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=489767 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1771840600.371:67003): pid=489764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=80.94.92.182 addr=80.94.92.182 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771840600.371:67004): pid=489764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=489764 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771840600.371:67005): pid=489764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=80.94.92.182 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771840604.201:67006): pid=489801 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=489801 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771840604.291:67007): pid=489800 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=489801 suid=74 rport=57928 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771840604.291:67008): pid=489800 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=489801 suid=74 rport=57928 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771840604.379:67009): pid=489800 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=489800 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771840604.379:67010): pid=489800 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840607.023:67011): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840607.028:67012): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840607.212:67013): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840607.245:67014): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771840613.649:67015): pid=489852 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=489852 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771840613.729:67016): pid=489851 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=489852 suid=74 rport=40020 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.103.151 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771840613.729:67017): pid=489851 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=489852 suid=74 rport=40020 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.103.151 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771840613.925:67018): pid=489851 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=489851 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771840613.925:67019): pid=489851 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=209.38.103.151 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771840618.290:67020): pid=489854 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=489854 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771840618.501:67021): pid=489853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=489854 suid=74 rport=41150 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=170.64.198.125 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771840618.502:67022): pid=489853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=489854 suid=74 rport=41150 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=170.64.198.125 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771840618.726:67023): pid=489853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=489853 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771840618.726:67024): pid=489853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=170.64.198.125 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840618.743:67025): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840618.993:67026): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840625.030:67027): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840625.033:67028): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840625.037:67029): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840625.041:67030): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840625.045:67031): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840625.370:67032): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840625.398:67033): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840625.421:67034): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840625.468:67035): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840625.498:67036): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840638.032:67037): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840638.036:67038): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840638.213:67039): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840638.265:67040): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840649.028:67041): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840649.281:67042): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771840651.821:67043): pid=490106 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=490106 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771840652.092:67044): pid=490105 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=490106 suid=74 rport=52760 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.103.151 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771840652.092:67045): pid=490105 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=490106 suid=74 rport=52760 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.103.151 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771840652.183:67046): pid=490105 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=490105 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771840652.183:67047): pid=490105 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=209.38.103.151 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840656.030:67048): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840656.034:67049): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840656.038:67050): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840656.041:67051): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840656.046:67052): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840656.382:67053): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840656.383:67054): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840656.460:67055): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840656.484:67056): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840656.580:67057): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771840659.837:67058): pid=490251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=490251 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771840659.908:67059): pid=490250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=490251 suid=74 rport=54590 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771840659.908:67060): pid=490250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=490251 suid=74 rport=54590 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771840659.969:67061): pid=490250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=490250 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771840659.969:67062): pid=490250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771840662.955:67063): pid=490287 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=490287 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771840663.043:67064): pid=490286 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=490287 suid=74 rport=41764 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771840663.043:67065): pid=490286 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=490287 suid=74 rport=41764 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771840663.141:67066): pid=490286 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=490286 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771840663.141:67067): pid=490286 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840669.031:67068): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840669.036:67069): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840669.184:67070): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840669.278:67071): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771840678.384:67072): pid=490337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=490337 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771840678.584:67073): pid=490336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=490337 suid=74 rport=42192 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=170.64.198.125 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771840678.585:67074): pid=490336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=490337 suid=74 rport=42192 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=170.64.198.125 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771840678.796:67075): pid=490336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=490336 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771840678.796:67076): pid=490336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=170.64.198.125 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840680.029:67077): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840680.292:67078): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840687.032:67079): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840687.036:67080): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840687.039:67081): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840687.043:67082): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840687.048:67083): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840687.352:67084): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840687.415:67085): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840687.493:67086): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840687.501:67087): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840687.629:67088): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771840689.912:67089): pid=490513 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=490513 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771840689.994:67090): pid=490512 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=490513 suid=74 rport=35794 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.103.151 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771840689.994:67091): pid=490512 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=490513 suid=74 rport=35794 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.103.151 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771840690.082:67092): pid=490512 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=490512 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771840690.082:67093): pid=490512 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=209.38.103.151 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840700.027:67094): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840700.032:67095): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840700.230:67096): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840700.261:67097): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840711.030:67098): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840711.296:67099): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771840712.386:67100): pid=490588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=490588 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771840712.591:67101): pid=490587 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=490588 suid=74 rport=60068 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771840712.591:67102): pid=490587 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=490588 suid=74 rport=60068 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771840712.654:67103): pid=490587 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=490587 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771840712.654:67104): pid=490587 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840718.033:67105): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840718.037:67106): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840718.040:67107): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840718.045:67108): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840718.049:67109): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840718.386:67110): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840718.414:67111): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840718.470:67112): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840718.501:67113): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840718.588:67114): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771840718.954:67115): pid=490734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=490734 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771840719.044:67116): pid=490733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=490734 suid=74 rport=43028 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771840719.045:67117): pid=490733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=490734 suid=74 rport=43028 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771840719.144:67118): pid=490733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=490733 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771840719.144:67119): pid=490733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771840727.155:67120): pid=490771 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=490771 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771840727.235:67121): pid=490770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=490771 suid=74 rport=43010 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.103.151 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771840727.235:67122): pid=490770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=490771 suid=74 rport=43010 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.103.151 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771840727.325:67123): pid=490770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=490770 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771840727.325:67124): pid=490770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=209.38.103.151 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840731.035:67125): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840731.039:67126): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840731.166:67127): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840731.328:67128): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771840734.846:67129): pid=490817 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=490817 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771840735.094:67130): pid=490816 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=490817 suid=74 rport=59658 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=170.64.198.125 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771840735.094:67131): pid=490816 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=490817 suid=74 rport=59658 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=170.64.198.125 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771840735.275:67132): pid=490816 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=490816 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771840735.275:67133): pid=490816 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=170.64.198.125 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840742.030:67134): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840742.258:67135): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840749.033:67136): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840749.037:67137): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840749.041:67138): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840749.044:67139): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840749.049:67140): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840749.300:67141): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840749.354:67142): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840749.386:67143): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840749.398:67144): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840749.462:67145): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840762.026:67146): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840762.030:67147): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840762.212:67148): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840762.239:67149): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771840762.723:67150): pid=491039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=491039 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771840762.810:67151): pid=491038 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=491039 suid=74 rport=34356 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771840762.810:67152): pid=491038 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=491039 suid=74 rport=34356 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771840762.890:67153): pid=491038 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=491038 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771840762.890:67154): pid=491038 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=159.223.233.59 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771840764.202:67155): pid=491041 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=491041 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771840764.285:67156): pid=491040 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=491041 suid=74 rport=49776 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.103.151 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771840764.285:67157): pid=491040 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=491041 suid=74 rport=49776 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.103.151 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771840764.377:67158): pid=491040 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=491040 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771840764.377:67159): pid=491040 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=209.38.103.151 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840773.027:67160): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771840773.202:67161): pid=491069 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=491069 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=SERVICE_STOP msg=audit(1771840773.263:67162): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1771840773.301:67163): pid=491068 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=491069 suid=74 rport=60386 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771840773.301:67164): pid=491068 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=491069 suid=74 rport=60386 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771840773.388:67165): pid=491068 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=491068 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771840773.388:67166): pid=491068 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=161.35.203.153 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840780.031:67167): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840780.036:67168): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840780.040:67169): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840780.043:67170): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840780.223:67171): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840780.379:67172): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840780.486:67173): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840780.597:67174): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840780.621:67175): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840780.754:67176): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771840789.057:67177): pid=491255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=491255 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771840789.264:67178): pid=491254 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=491255 suid=74 rport=56846 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=170.64.198.125 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771840789.265:67179): pid=491254 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=491255 suid=74 rport=56846 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=170.64.198.125 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771840789.581:67180): pid=491254 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=491254 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771840789.581:67181): pid=491254 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=170.64.198.125 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840793.027:67182): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840793.031:67183): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840793.240:67184): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840793.281:67185): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771840800.913:67186): pid=491303 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=491303 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771840801.000:67187): pid=491302 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=491303 suid=74 rport=40282 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.103.151 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771840801.000:67188): pid=491302 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=491303 suid=74 rport=40282 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.103.151 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771840801.086:67189): pid=491302 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=491302 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771840801.086:67190): pid=491302 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=209.38.103.151 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840804.026:67191): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840804.291:67192): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771840810.695:67193): pid=491339 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=491339 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771840810.805:67194): pid=491338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=491339 suid=74 rport=51366 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=80.94.92.182 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771840810.805:67195): pid=491338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=491339 suid=74 rport=51366 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=80.94.92.182 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1771840811.032:67196): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840811.035:67197): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840811.039:67198): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840811.043:67199): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840811.046:67200): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840811.338:67201): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771840811.343:67202): pid=491338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=491339 suid=74 rport=51366 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=80.94.92.182 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771840811.343:67203): pid=491338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=491339 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1771840811.344:67204): pid=491338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=80.94.92.182 addr=80.94.92.182 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771840811.345:67205): pid=491338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=491338 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771840811.345:67206): pid=491338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=80.94.92.182 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840811.365:67207): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840811.408:67208): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840811.458:67209): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840811.484:67210): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840824.027:67211): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840824.032:67212): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840824.184:67213): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840824.296:67214): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840835.024:67215): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840835.253:67216): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771840840.927:67217): pid=491557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=491557 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771840841.006:67218): pid=491556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=491557 suid=74 rport=35220 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.103.151 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771840841.007:67219): pid=491556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=491557 suid=74 rport=35220 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.103.151 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771840841.098:67220): pid=491556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=491556 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771840841.098:67221): pid=491556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=209.38.103.151 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840842.034:67222): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840842.038:67223): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840842.042:67224): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840842.046:67225): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840842.050:67226): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840842.391:67227): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840842.412:67228): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840842.421:67229): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840842.439:67230): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840842.463:67231): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771840843.782:67232): pid=491734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=491734 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771840843.989:67233): pid=491733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=491734 suid=74 rport=56758 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=170.64.198.125 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771840843.989:67234): pid=491733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=491734 suid=74 rport=56758 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=170.64.198.125 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771840844.206:67235): pid=491733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=491733 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771840844.207:67236): pid=491733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=170.64.198.125 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840855.023:67237): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840855.027:67238): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840855.154:67239): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840855.313:67240): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840866.026:67241): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840866.297:67242): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840873.024:67243): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840873.027:67244): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840873.031:67245): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840873.035:67246): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840873.039:67247): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840873.316:67248): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840873.398:67249): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840873.403:67250): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840873.516:67251): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840873.612:67252): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771840878.244:67253): pid=491995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=491995 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771840878.322:67254): pid=491994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=491995 suid=74 rport=56346 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.103.151 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771840878.323:67255): pid=491994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=491995 suid=74 rport=56346 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.103.151 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771840878.413:67256): pid=491994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=491994 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771840878.414:67257): pid=491994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=209.38.103.151 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840886.025:67258): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840886.028:67259): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840886.219:67260): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840886.248:67261): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840897.027:67262): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771840897.195:67263): pid=492070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=492070 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=SERVICE_STOP msg=audit(1771840897.279:67264): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1771840897.418:67265): pid=492069 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=492070 suid=74 rport=47418 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=170.64.198.125 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771840897.418:67266): pid=492069 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=492070 suid=74 rport=47418 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=170.64.198.125 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771840897.616:67267): pid=492069 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=492069 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771840897.617:67268): pid=492069 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=170.64.198.125 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840903.455:67269): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840903.459:67270): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840903.463:67271): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840903.568:67272): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840903.638:67273): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840903.780:67274): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840903.802:67275): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840903.814:67276): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840903.951:67277): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840903.997:67278): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840917.027:67279): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840917.031:67280): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840917.150:67281): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840917.270:67282): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771840918.050:67283): pid=492294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=492294 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771840918.130:67284): pid=492293 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=492294 suid=74 rport=48586 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.103.151 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771840918.131:67285): pid=492293 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=492294 suid=74 rport=48586 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.103.151 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771840918.224:67286): pid=492293 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=492293 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771840918.224:67287): pid=492293 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=209.38.103.151 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840928.027:67288): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840928.238:67289): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840934.030:67290): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840934.033:67291): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840934.037:67292): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840934.040:67293): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840934.044:67294): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840934.307:67295): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840934.400:67296): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840934.446:67297): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840934.490:67298): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840934.587:67299): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771840946.961:67300): pid=492474 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=492474 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771840947.034:67301): pid=492473 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=492474 suid=74 rport=28668 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=185.156.73.233 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771840947.034:67302): pid=492473 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=492474 suid=74 rport=28668 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=185.156.73.233 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771840947.643:67303): pid=492473 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=492474 suid=74 rport=28668 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=185.156.73.233 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771840947.644:67304): pid=492473 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=492474 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1771840947.645:67305): pid=492473 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=185.156.73.233 addr=185.156.73.233 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771840947.645:67306): pid=492473 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=492473 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771840947.645:67307): pid=492473 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=185.156.73.233 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840947.666:67308): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840947.672:67309): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840947.792:67310): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840948.456:67311): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771840950.928:67312): pid=492517 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=492517 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771840951.229:67313): pid=492516 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=492517 suid=74 rport=44920 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=170.64.198.125 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771840951.229:67314): pid=492516 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=492517 suid=74 rport=44920 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=170.64.198.125 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771840951.345:67315): pid=492516 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=492516 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771840951.345:67316): pid=492516 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=170.64.198.125 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771840956.868:67317): pid=492519 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=492519 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771840956.949:67318): pid=492518 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=492519 suid=74 rport=46892 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.103.151 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771840956.949:67319): pid=492518 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=492519 suid=74 rport=46892 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.103.151 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771840957.038:67320): pid=492518 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=492518 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771840957.038:67321): pid=492518 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=209.38.103.151 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840959.026:67322): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840959.289:67323): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840965.029:67324): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840965.033:67325): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840965.036:67326): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840965.040:67327): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840965.044:67328): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840965.249:67329): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840965.394:67330): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840965.482:67331): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840965.499:67332): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840965.515:67333): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840978.026:67334): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840978.137:67335): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840979.021:67336): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840979.179:67337): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840990.026:67338): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840990.255:67339): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840996.031:67340): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840996.034:67341): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840996.038:67342): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840996.042:67343): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771840996.046:67344): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840996.325:67345): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840996.348:67346): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840996.395:67347): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840996.405:67348): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771840996.455:67349): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771840997.216:67350): pid=492948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=492948 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771840997.296:67351): pid=492947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=492948 suid=74 rport=51758 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.103.151 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771840997.296:67352): pid=492947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=492948 suid=74 rport=51758 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.103.151 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771840997.386:67353): pid=492947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=492947 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771840997.386:67354): pid=492947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=209.38.103.151 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771840999.207:67355): pid=492950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=492950 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771840999.288:67356): pid=492949 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=492950 suid=74 rport=60056 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.148.10.121 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771840999.288:67357): pid=492949 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=492950 suid=74 rport=60056 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.148.10.121 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771840999.464:67358): pid=492949 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=492950 suid=74 rport=60056 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.148.10.121 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771840999.464:67359): pid=492949 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=492950 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771840999.465:67360): pid=492949 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=492949 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771840999.465:67361): pid=492949 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=45.148.10.121 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771841006.622:67362): pid=492952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=492952 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771841006.832:67363): pid=492951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=492952 suid=74 rport=46412 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=170.64.198.125 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771841006.832:67364): pid=492951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=492952 suid=74 rport=46412 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=170.64.198.125 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771841007.128:67365): pid=492951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=492951 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771841007.128:67366): pid=492951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=170.64.198.125 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771841009.030:67367): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771841009.169:67368): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771841010.020:67369): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771841010.176:67370): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771841021.024:67371): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771841021.255:67372): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771841024.246:67373): pid=493067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=493067 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771841024.247:67374): pid=493066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=493067 suid=74 rport=54560 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=80.94.92.182 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771841024.248:67375): pid=493066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=493067 suid=74 rport=54560 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=80.94.92.182 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771841025.637:67376): pid=493066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=493067 suid=74 rport=54560 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=80.94.92.182 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771841025.638:67377): pid=493066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=493067 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1771841025.639:67378): pid=493066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=80.94.92.182 addr=80.94.92.182 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771841025.639:67379): pid=493066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=493066 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771841025.639:67380): pid=493066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=80.94.92.182 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771841027.034:67381): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771841027.037:67382): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771841027.041:67383): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771841027.044:67384): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771841027.048:67385): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771841027.408:67386): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771841027.430:67387): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771841027.452:67388): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771841027.455:67389): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771841027.470:67390): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771841034.044:67391): pid=493215 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=493215 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771841034.126:67392): pid=493214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=493215 suid=74 rport=51448 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.103.151 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771841034.126:67393): pid=493214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=493215 suid=74 rport=51448 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.103.151 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771841034.217:67394): pid=493214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=493214 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771841034.217:67395): pid=493214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=209.38.103.151 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771841040.029:67396): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771841040.578:67397): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771841040.585:67398): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771841040.758:67399): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771841052.027:67400): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771841052.252:67401): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771841058.030:67402): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771841058.034:67403): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771841058.038:67404): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771841058.043:67405): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771841058.048:67406): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771841058.262:67407): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771841058.462:67408): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771841058.528:67409): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771841058.541:67410): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771841058.579:67411): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771841061.000:67412): pid=493443 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=493443 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771841061.204:67413): pid=493442 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=493443 suid=74 rport=34276 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=170.64.198.125 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771841061.204:67414): pid=493442 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=493443 suid=74 rport=34276 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=170.64.198.125 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771841061.422:67415): pid=493442 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=493442 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771841061.422:67416): pid=493442 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=170.64.198.125 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771841071.027:67417): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771841071.031:67418): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771841071.067:67419): pid=493463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=493463 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771841071.149:67420): pid=493457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=493463 suid=74 rport=53448 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.103.151 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771841071.149:67421): pid=493457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=493463 suid=74 rport=53448 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.103.151 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_STOP msg=audit(1771841071.222:67422): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771841071.236:67423): pid=493457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=493457 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771841071.236:67424): pid=493457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=209.38.103.151 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771841071.248:67425): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771841083.027:67426): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771841083.286:67427): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771841089.025:67428): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771841089.029:67429): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771841089.033:67430): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771841089.037:67431): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771841089.042:67432): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771841089.384:67433): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771841089.428:67434): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771841089.470:67435): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771841089.492:67436): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771841089.566:67437): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771841102.028:67438): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771841102.032:67439): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771841102.182:67440): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771841102.310:67441): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771841109.629:67442): pid=493755 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=493755 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771841109.709:67443): pid=493754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=493755 suid=74 rport=46840 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.103.151 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771841109.709:67444): pid=493754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=493755 suid=74 rport=46840 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.103.151 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771841109.799:67445): pid=493754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=493754 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771841109.799:67446): pid=493754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=209.38.103.151 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771841114.027:67447): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771841114.274:67448): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771841114.549:67449): pid=493788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=493788 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771841114.753:67450): pid=493787 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=493788 suid=74 rport=42432 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=170.64.198.125 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771841114.753:67451): pid=493787 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=493788 suid=74 rport=42432 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=170.64.198.125 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771841115.066:67452): pid=493787 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=493787 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771841115.066:67453): pid=493787 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=170.64.198.125 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771841120.027:67454): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771841120.030:67455): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771841120.033:67456): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771841120.035:67457): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771841120.038:67458): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771841120.384:67459): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771841120.413:67460): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771841120.435:67461): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771841120.479:67462): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771841120.548:67463): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771841133.027:67464): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771841133.031:67465): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771841133.226:67466): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771841133.257:67467): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771841145.027:67468): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771841145.310:67469): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771841145.427:67470): pid=494036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=494036 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771841145.512:67471): pid=494035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=494036 suid=74 rport=48756 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.103.151 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771841145.512:67472): pid=494035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=494036 suid=74 rport=48756 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.103.151 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771841145.604:67473): pid=494035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=494035 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771841145.604:67474): pid=494035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=209.38.103.151 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771841151.035:67475): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771841151.040:67476): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771841151.043:67477): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771841151.048:67478): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771841151.052:67479): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771841151.398:67480): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771841151.426:67481): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771841151.480:67482): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771841151.561:67483): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771841151.607:67484): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771841154.565:67485): pid=494182 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=494182 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771841154.668:67486): pid=494181 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=494182 suid=74 rport=61948 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=91.224.92.190 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771841154.669:67487): pid=494181 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=494182 suid=74 rport=61948 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=91.224.92.190 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771841155.289:67488): pid=494181 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=494182 suid=74 rport=61948 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=91.224.92.190 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771841155.289:67489): pid=494181 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=494182 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1771841155.290:67490): pid=494181 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=91.224.92.190 addr=91.224.92.190 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771841155.291:67491): pid=494181 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=494181 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771841155.291:67492): pid=494181 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=91.224.92.190 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771841164.029:67493): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771841164.033:67494): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771841164.191:67495): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771841164.284:67496): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771841167.709:67497): pid=494226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=494226 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771841167.810:67498): pid=494225 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=494226 suid=74 rport=43010 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=170.64.198.125 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771841167.810:67499): pid=494225 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=494226 suid=74 rport=43010 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=170.64.198.125 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771841168.027:67500): pid=494225 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=494225 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771841168.027:67501): pid=494225 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=170.64.198.125 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771841176.024:67502): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771841176.295:67503): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771841182.027:67504): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771841182.032:67505): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771841182.034:67506): pid=494286 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=494286 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=SERVICE_START msg=audit(1771841182.036:67507): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771841182.041:67508): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771841182.046:67509): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1771841182.115:67510): pid=494284 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=494286 suid=74 rport=32790 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.103.151 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771841182.116:67511): pid=494284 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=494286 suid=74 rport=32790 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.103.151 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771841182.207:67512): pid=494284 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=494284 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771841182.207:67513): pid=494284 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=209.38.103.151 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771841182.318:67514): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771841182.386:67515): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771841182.508:67516): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771841182.565:67517): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771841182.605:67518): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771841195.028:67519): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771841195.031:67520): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771841195.206:67521): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771841195.303:67522): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771841207.025:67523): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771841207.298:67524): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771841213.027:67525): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771841213.031:67526): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771841213.034:67527): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771841213.038:67528): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771841213.042:67529): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771841213.395:67530): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771841213.432:67531): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771841213.440:67532): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771841213.462:67533): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771841213.598:67534): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771841218.299:67535): pid=494692 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=494692 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771841218.387:67536): pid=494691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=494692 suid=74 rport=53184 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.103.151 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771841218.387:67537): pid=494691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=494692 suid=74 rport=53184 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.103.151 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771841218.489:67538): pid=494691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=494691 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771841218.490:67539): pid=494691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=209.38.103.151 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771841225.075:67540): pid=494694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=494694 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771841225.284:67541): pid=494693 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=494694 suid=74 rport=60912 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=170.64.198.125 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771841225.285:67542): pid=494693 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=494694 suid=74 rport=60912 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=170.64.198.125 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771841225.504:67543): pid=494693 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=494693 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771841225.504:67544): pid=494693 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=170.64.198.125 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771841225.523:67545): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771841225.526:67546): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771841225.719:67547): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771841225.745:67548): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771841238.033:67549): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771841238.287:67550): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771841244.030:67551): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771841244.035:67552): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771841244.039:67553): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771841244.043:67554): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771841244.047:67555): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771841244.347:67556): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771841244.368:67557): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771841244.432:67558): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771841244.534:67559): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771841244.562:67560): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771841245.115:67561): pid=494913 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=494913 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771841245.116:67562): pid=494912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=494913 suid=74 rport=57744 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=80.94.92.182 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771841245.116:67563): pid=494912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=494913 suid=74 rport=57744 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=80.94.92.182 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771841245.887:67564): pid=494912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=494913 suid=74 rport=57744 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=80.94.92.182 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771841245.888:67565): pid=494912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=494913 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1771841245.888:67566): pid=494912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=80.94.92.182 addr=80.94.92.182 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771841245.889:67567): pid=494912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=494912 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771841245.889:67568): pid=494912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=80.94.92.182 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771841253.805:67569): pid=494915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=494915 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771841253.886:67570): pid=494914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=494915 suid=74 rport=50582 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.103.151 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771841253.886:67571): pid=494914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=494915 suid=74 rport=50582 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.103.151 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771841253.974:67572): pid=494914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=494914 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771841253.974:67573): pid=494914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=209.38.103.151 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771841256.025:67574): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771841256.027:67575): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771841256.171:67576): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771841256.218:67577): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771841269.028:67578): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771841269.287:67579): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771841275.031:67580): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771841275.034:67581): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771841275.038:67582): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771841275.042:67583): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771841275.045:67584): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771841275.290:67585): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771841275.453:67586): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771841275.497:67587): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771841275.615:67588): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771841275.668:67589): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771841277.710:67590): pid=495169 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=495169 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771841277.915:67591): pid=495168 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=495169 suid=74 rport=45626 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=170.64.198.125 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771841277.916:67592): pid=495168 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=495169 suid=74 rport=45626 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=170.64.198.125 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771841278.131:67593): pid=495168 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=495168 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771841278.132:67594): pid=495168 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=170.64.198.125 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771841287.023:67595): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771841287.027:67596): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771841287.177:67597): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771841287.260:67598): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771841289.436:67599): pid=495214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=495214 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771841289.515:67600): pid=495213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=495214 suid=74 rport=42698 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.103.151 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771841289.516:67601): pid=495213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=495214 suid=74 rport=42698 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.103.151 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771841289.605:67602): pid=495213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=495213 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771841289.605:67603): pid=495213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=209.38.103.151 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771841300.034:67604): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771841300.311:67605): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771841306.032:67606): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771841306.035:67607): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771841306.039:67608): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771841306.043:67609): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771841306.048:67610): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771841306.378:67611): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771841306.400:67612): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771841306.425:67613): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771841306.498:67614): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771841306.551:67615): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771841318.023:67616): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771841318.026:67617): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771841318.145:67618): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771841318.297:67619): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771841326.041:67620): pid=495479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=495479 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771841326.121:67621): pid=495478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=495479 suid=74 rport=48866 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.103.151 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771841326.121:67622): pid=495478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=495479 suid=74 rport=48866 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=209.38.103.151 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771841326.212:67623): pid=495478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=495478 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771841326.212:67624): pid=495478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=209.38.103.151 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771841330.412:67625): pid=495481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=495481 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771841330.620:67626): pid=495480 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=495481 suid=74 rport=49908 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=170.64.198.125 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771841330.621:67627): pid=495480 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=495481 suid=74 rport=49908 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=170.64.198.125 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1771841330.919:67628): pid=495480 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=495480 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1771841330.919:67629): pid=495480 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=170.64.198.125 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771841330.940:67630): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771841331.208:67631): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5c6c62014a3c130da1a3e30f3b5052af536e5b52990c1e4db1a91ad942bb7a73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771841337.035:67632): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771841337.038:67633): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771841337.042:67634): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771841337.046:67635): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771841337.050:67636): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771841337.287:67637): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8ebe44ed12d353006028e57e0aeb25628105cf48d5f17c6b3eaabe4545c01951 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771841337.442:67638): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f6ccdb83cd42e8ee6691431c55915eef3b246c44a24ae79062df16bd509430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771841337.479:67639): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0c5ee20c4eb063afe9a3239088b30ba41dfea235bd6f4d694b6b587aff384b0c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771841337.501:67640): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90ad5fc796a59f4b8d2d31ad910d215053b335660bec2a0c54b1e077a9dd69ab comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771841337.531:67641): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e8721357a08ab9746cdfd39e41b9cd08846a86f9d85f5c8ffd902cd308ceda24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771841339.022:67642): pid=495659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=495659 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771841339.023:67643): pid=495658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=495659 suid=74 rport=35366 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771841339.023:67644): pid=495658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=495659 suid=74 rport=35366 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1771841339.088:67645): pid=495658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1771841339.106:67646): pid=495658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771841339.106:67647): pid=495658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:fd:28:52:d8:9e:43:ab:ba:3d:3f:9f:5e:fc:d9:a0:40:e4:52:01:c2:4e:07:0b:b8:e8:7b:a8:d3:71:c1:74:1e exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1771841339.135:67648): pid=495658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771841339.136:67649): pid=495658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=495659 suid=74 rport=35366 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1771841339.138:67650): pid=495658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1771841339.139:67651): pid=495658 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=231 res=1UID="root" OLD-AUID="unset" AUID="zuul"
type=SYSCALL msg=audit(1771841339.139:67651): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffe5b8392a0 a2=4 a3=3e8 items=0 ppid=416325 pid=495658 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=231 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1771841339.139:67651): proctitle=737368643A207A75756C205B707269765D
type=USER_ROLE_CHANGE msg=audit(1771841339.141:67652): pid=495658 uid=0 auid=1000 ses=231 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_ACCT msg=audit(1771841339.200:67653): pid=495661 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_ACQ msg=audit(1771841339.200:67654): pid=495661 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="zuul" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_ROLE_CHANGE msg=audit(1771841339.201:67655): pid=495661 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1771841339.202:67656): pid=495661 uid=0 subj=system_u:system_r:init_t:s0 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=232 res=1UID="root" OLD-AUID="unset" AUID="zuul"
type=SYSCALL msg=audit(1771841339.202:67656): arch=c000003e syscall=1 success=yes exit=4 a0=7 a1=7ffdc1fc8400 a2=4 a3=3e8 items=0 ppid=1 pid=495661 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=232 comm="(systemd)" exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1771841339.202:67656): proctitle="(systemd)"
type=USER_START msg=audit(1771841339.203:67657): pid=495661 uid=0 auid=1000 ses=232 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="zuul" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SERVICE_START msg=audit(1771841339.359:67658): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1771841339.378:67659): pid=495658 uid=0 auid=1000 ses=231 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771841339.379:67660): pid=495677 uid=0 auid=1000 ses=231 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=495677 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="root"
type=CRED_ACQ msg=audit(1771841339.381:67661): pid=495677 uid=0 auid=1000 ses=231 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_LOGIN msg=audit(1771841339.426:67662): pid=495658 uid=0 auid=1000 ses=231 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771841339.426:67663): pid=495658 uid=0 auid=1000 ses=231 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771841339.428:67664): pid=495658 uid=0 auid=1000 ses=231 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=495678 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1771841339.489:67665): pid=495691 uid=1000 auid=1000 ses=231 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1771841339.489:67666): pid=495691 uid=1000 auid=1000 ses=231 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E626F6E6964747863756E6478746E79747A6F7661676863697972757678667A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1771841339.490:67667): pid=495691 uid=1000 auid=1000 ses=231 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1771841339.494:67668): pid=495691 uid=1000 auid=1000 ses=231 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771841339.975:67669): pid=495691 uid=1000 auid=1000 ses=231 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1771841339.975:67670): pid=495691 uid=1000 auid=1000 ses=231 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1771841339.978:67671): pid=495658 uid=0 auid=1000 ses=231 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1771841339.978:67672): pid=495658 uid=0 auid=1000 ses=231 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771841345.134:67673): pid=495658 uid=0 auid=1000 ses=231 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=495677 suid=1000 rport=35366 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771841345.134:67674): pid=495658 uid=0 auid=1000 ses=231 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=495677 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1771841345.137:67675): pid=495658 uid=0 auid=1000 ses=231 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_DISP msg=audit(1771841345.138:67676): pid=495658 uid=0 auid=1000 ses=231 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771841345.138:67677): pid=495658 uid=0 auid=1000 ses=231 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=495658 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="root"
type=SERVICE_START msg=audit(1771841349.028:67678): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1771841349.031:67679): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771841349.254:67680): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=90467f6ea57cd91e8cc9fadb7c2875e74c1393846a9911270ae0d1b326de1b35 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771841349.307:67681): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=33cd10727aa3e5ceb792869930c7866da4988efffa8704f97a5a039f004f52a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1771841355.272:67682): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771841357.047:67683): pid=495742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=495742 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1771841357.049:67684): pid=495741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=495742 suid=74 rport=58682 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1771841357.049:67685): pid=495741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=495742 suid=74 rport=58682 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1771841357.113:67686): pid=495741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1771841357.126:67687): pid=495741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771841357.126:67688): pid=495741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:fd:28:52:d8:9e:43:ab:ba:3d:3f:9f:5e:fc:d9:a0:40:e4:52:01:c2:4e:07:0b:b8:e8:7b:a8:d3:71:c1:74:1e exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1771841357.158:67689): pid=495741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1771841357.159:67690): pid=495741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=495742 suid=74 rport=58682 laddr=38.102.83.213 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1771841357.161:67691): pid=495741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1771841357.161:67692): pid=495741 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=233 res=1UID="root" OLD-AUID="unset" AUID="zuul"
type=SYSCALL msg=audit(1771841357.161:67692): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffdab633a50 a2=4 a3=3e8 items=0 ppid=416325 pid=495741 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=233 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1771841357.161:67692): proctitle=737368643A207A75756C205B707269765D
type=USER_ROLE_CHANGE msg=audit(1771841357.163:67693): pid=495741 uid=0 auid=1000 ses=233 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_ACCT msg=audit(1771841357.217:67694): pid=495744 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_ACQ msg=audit(1771841357.217:67695): pid=495744 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="zuul" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_ROLE_CHANGE msg=audit(1771841357.218:67696): pid=495744 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1771841357.219:67697): pid=495744 uid=0 subj=system_u:system_r:init_t:s0 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=234 res=1UID="root" OLD-AUID="unset" AUID="zuul"
type=SYSCALL msg=audit(1771841357.219:67697): arch=c000003e syscall=1 success=yes exit=4 a0=7 a1=7ffdc1fc8400 a2=4 a3=3e8 items=0 ppid=1 pid=495744 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=234 comm="(systemd)" exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1771841357.219:67697): proctitle="(systemd)"
type=USER_START msg=audit(1771841357.221:67698): pid=495744 uid=0 auid=1000 ses=234 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="zuul" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SERVICE_START msg=audit(1771841357.383:67699): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1771841357.407:67700): pid=495741 uid=0 auid=1000 ses=233 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771841357.409:67701): pid=495760 uid=0 auid=1000 ses=233 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=495760 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="root"
type=CRED_ACQ msg=audit(1771841357.410:67702): pid=495760 uid=0 auid=1000 ses=233 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_LOGIN msg=audit(1771841357.454:67703): pid=495741 uid=0 auid=1000 ses=233 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1771841357.454:67704): pid=495741 uid=0 auid=1000 ses=233 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1771841357.457:67705): pid=495741 uid=0 auid=1000 ses=233 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c7:2f:b0:8e:1c:a7:7e:99:fd:2d:a1:95:0f:df:d8:d9:99:72:f6:e7:80:c3:86:26:ff:b6:0b:2f:30:6f:c7:8f direction=? spid=495761 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1771841357.519:67706): pid=495761 uid=1000 auid=1000 ses=233 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1771841357.519:67707): pid=495761 uid=1000 auid=1000 ses=233 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=7273796E63202D2D736572766572202D2D73656E646572202D6C4C6F67447470727A652E4C73667843202E202F7661722F6C6F67 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1771841357.520:67708): pid=495761 uid=1000 auid=1000 ses=233 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1771841357.525:67709): pid=495761 uid=1000 auid=1000 ses=233 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"